Extracted

• • Target

    2bae4044679898a04bc2d041e4b3b6cf_JaffaCakes118

  • Size

    476KB

  • MD5

    2bae4044679898a04bc2d041e4b3b6cf

  • SHA1

    98a609d14da51e954806ad3709daa4f8a8930fe2

  • SHA256

    8ce99bc5cebaa71467bcdb4cd3be6d599a7553b5221a10b2e740fb4204a461ff

  • SHA512

    38cf185a29ca6d068d83ede0502b4d38747b21f32d6c7e14ae9de2e1e51b39f88f3260d3844287e8c876f04d27da71905d2093b77057736ab68fb6cd22eeab48

  • SSDEEP

    12288:aeJg3Stp4Bn+laUoW/6cOce8uhroZPXPQr:jJg3SYd+laUdOce8uV6Qr

  Score

  10^/10

  metasploitbackdoorthemidatrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Deletes itself

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Drops file in System32 directory

  behavioral1behavioral2