Extracted

• • Target

    17b739e3023ebe3b9a31e1d8e437ce2e_JaffaCakes118

  • Size

    43KB

  • MD5

    17b739e3023ebe3b9a31e1d8e437ce2e

  • SHA1

    0544351944103cd293586513939ae87447318011

  • SHA256

    862c3744f321557142a17753624cf29762861e9ec65cc9ceec79a1edde93dd1e

  • SHA512

    09035361acc60636b2a58bbc0967c9565217787c3a8917e09960849ad25f19107e36efdab5727513f96e8459d91f36e5fa2476fabd3b49ac7c2657b2d07f6fe1

  • SSDEEP

    768:edK9PrqC1lSQ1l3rc4GpOIes5efLvDDe/3Za80rgqNdAAoRhmwRh/E12:eMtGVQn3YuIZ8fTDD6YVrgkdAAoR7b/3

  Score

  10^/10

  persistenceupx

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Adds Run key to start application

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2