Extracted

• • Target

    72dbb33fdf8b1dd9179d25a16c3fbb45_JaffaCakes118

  • Size

    473KB

  • MD5

    72dbb33fdf8b1dd9179d25a16c3fbb45

  • SHA1

    65d88abe339f378380087762b8e5b42257ac468a

  • SHA256

    a697aa358e5395f5aaccff9265197e250f8f658015225d7bd2523b9777195c01

  • SHA512

    c82b9287cebbda127217760a29910b96c5d603421e7848cc1d317a20bcb93b2ad9bc29446c30a3c33264735cf1db73bcbb120981c3d287b22fab727cb7000f68

  • SSDEEP

    12288:eV4h6QpAxQGdGf83oMIBMGXaOh35Kq76lppGfn:eQ6jQGdGfnqw/h57qvGf

  Score

  10^/10

  discoverypersistenceupx

  • Modifies WinLogon for persistence

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2