Extracted

• • Target

    1d101557dc7b95085ba874ac4bdb38dc_JaffaCakes118

  • Size

    3.0MB

  • MD5

    1d101557dc7b95085ba874ac4bdb38dc

  • SHA1

    d92e541c707cb8825860ba8f3bf801b06fb5b0c2

  • SHA256

    21249ce24600b1feac26a2a9883f3c6de299681a924be281630bc3869f0f4044

  • SHA512

    31dffd6ab386d1e6df37d9aa0333c2d16b3e154d2557bf1d8bb39ae313285ae4fc463a4ed92b8a86f39ff4a624d35dfc83c1b7567e634a96e29b47347e5d6e2f

  • SSDEEP

    49152:dqGB2KwBl+dyMzac4d12JVb4ZwDI0A3dQIOOtxE5/8ojWVVidT7gU9Y7xV:FB1wBlYykZ4L2JVkWQ3REJjWS7M7xV

  Score

  10^/10

  icedid620514333bankerloadertrojanvmprotect

  • IcedID, BokBot

    IcedID is a banking trojan capable of stealing credentials.

    trojanbankericedid

  • IcedID First Stage Loader

    loader

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  behavioral1behavioral2