Extracted

• • Target

    9ff996c9f1410f50673661636e7ea807_JaffaCakes118

  • Size

    1.0MB

  • MD5

    9ff996c9f1410f50673661636e7ea807

  • SHA1

    1bb427fd59aa3eceb1222f2903c226f0fc790164

  • SHA256

    f3fd353ec995ec76ffab63ea1b448e076268f7e891a651a170aa69d39e0b6d54

  • SHA512

    938514286dc5399be6fdf7f365d14ff4517351db3617e02bbb0d370384ce33029720ed2cfa73ff224df979ca5a77c797d83661ef2fdf844ec223b5dea354f386

  • SSDEEP

    3072:8sOv8fESTARqUUCFt9/Ns8QDCaExTV1NTTLQETTaEykC3/hC3/:ZOvk/E1TQmB6

  Score

  10^/10

  bazarloaderdiscoverydropperloaderpersistence

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader

  • Bazar/Team9 Loader payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2