Extracted

• • Target

    4784f322c5c68fedf2b6d3d2397c2aeb_JaffaCakes118

  • Size

    565KB

  • MD5

    4784f322c5c68fedf2b6d3d2397c2aeb

  • SHA1

    105bb3e04a56023cdcbf59c102fe2fc54ae4f93f

  • SHA256

    ad4f358a812fd9866556b0117c5c34190e45dfb04512ca6045081f0f0d6f877d

  • SHA512

    5e391659d9f45aea0c1bc1b326e9ab84f3a47c39bd8933a13de951775b33e98278c3e11b52df48b9cf6ba824782e9002b9875fc9be60dfdb975887a466745988

  • SSDEEP

    12288:Nnz4ePAs5ziotAjYsk0IfXV2GNvJ3IG4MMPtqV2uXD0:Jz4kAs5Ol3IfXV2+IXPS0

  Score

  10^/10

  persistenceupx

  • Modifies WinLogon for persistence

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2