Extracted

• • Target

    3f3fd650682d1b8e209c39552582cec2_JaffaCakes118

  • Size

    74KB

  • MD5

    3f3fd650682d1b8e209c39552582cec2

  • SHA1

    11c4c1ce4bb59542ec635939ab5d91efd6818d8c

  • SHA256

    5d7f38eb4e6fe1e7eb4e60180ceed24d98e52e761ae52e5e524801b3999c9790

  • SHA512

    f4f36d7ad946e61c737ebb9f0c63e56f1223cdf4fe14287b06ddb6b0b2fc98a8cdaa7965c4e2d4bb5a1da2257afa829ebd7fdfbb32224b5a79f82f9c60ff6919

  • SSDEEP

    768:9+Nm1a2FmLZuLFU/r6aqpHk5PmQnFgovom4at99lfO1Qtw/qsqcm9/p8kAn45:99YULFU/rVKCKovomN0QGiFcmc4

  Score

  8^/10

  persistence

  • Drops file in Drivers directory

  • Server Software Component: Terminal Services DLL

    persistence

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2