Extracted

• • Target

    983654c42c7dbcfe606794d50dd06ace_JaffaCakes118

  • Size

    2.1MB

  • MD5

    983654c42c7dbcfe606794d50dd06ace

  • SHA1

    da0da07d82a7faee3d2d5b045b0eeb9b7d7aa855

  • SHA256

    49255a7e201aebbd0dfd7e9384ada9d184f2fcdacbb054a897be53833b8a2f47

  • SHA512

    b397ba21a2bbb927aebcff171e8445a6a1002d401860d6817ea11bd6e4521742293607799ba6a7394d974542eeb43769e969fc64b1ec7b84600ac48d7e504e97

  • SSDEEP

    49152:TDqlM5ZAZMgcXJysAifSk+x9vIXgPFjMaZQILxNmD/bHjL5RSMkljS:TPgcZXqt7H6GaDvEjS

  Score

  10^/10

  oskievasioninfostealerspywarestealerthemidatrojan

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2