Extracted

• • Target

    54aae09aa11db7475dfe4f6ea67b07ff_JaffaCakes118

  • Size

    83KB

  • MD5

    54aae09aa11db7475dfe4f6ea67b07ff

  • SHA1

    beec54f9193fd9438a4dac1809a26e9ed8cdd6fb

  • SHA256

    0d0ac2967bc1b518e4410057d022058badb953c5f344e96e91f98d3283187fd2

  • SHA512

    e230198c3951240df608ffa36cb4a7d08c5c630ca6c277a3653e1b2183b8ed7ccf793364cb2909ce1dd38cbfc2d65e807ba986c96dbd208b488c5dedf2e0fb71

  • SSDEEP

    1536:EjsEUw0SKfF2zZ8hz4ZhInCh1xE3T0ZCEkkTUQAf:+9UbSWhRej4j1E7T2

  Score

  10^/10

  latentbotpersistencetrojanupx

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Adds Run key to start application

    persistence

  • Drops file in System32 directory

  behavioral1behavioral2