Extracted

• • Target

    16324fc81aea75ee1b90fbe20eb91c00_JaffaCakes118

  • Size

    531KB

  • MD5

    16324fc81aea75ee1b90fbe20eb91c00

  • SHA1

    d6cf3bd8d5febb790e1ff8dd39b378229e73462f

  • SHA256

    0f948ceb06d973c6276ffc742b18c638dc301576997dbb20b5802df6cb35a8d3

  • SHA512

    d5974f326b4d61743ee3f64e7de79fa105e03ce640555aeae823d2270ec915b795b8308f9291ee718dbdf0213e0eec425b7b97159b0c9c5c0131dcb204d501a6

  • SSDEEP

    12288:A38uZK4UUIrqAMm+mgyIEiEPmU37ml5tiMWHfQTTwis:o1UqAMaIsPmULmFiZ

  Score

  10^/10

  persistenceupx

  • Modifies WinLogon for persistence

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2