Extracted

• • Target

    cff56a501e35a27c96f8db4a9d887497_JaffaCakes118

  • Size

    188KB

  • MD5

    cff56a501e35a27c96f8db4a9d887497

  • SHA1

    3db792fa6e953cc3618cc0f71535995c67f7ef40

  • SHA256

    f6b6b9b9268e044fb000b2b3dc24cb176336bfb33c4de9dcb2361be26c09995d

  • SHA512

    e92f1d2d36b5dbdf768c690fbd39878bc2d7a46e9d24457f76c5c4330b64938068bb600936f31d516ba51b925dacb239433e9bd68fbccb2c6dc1593ad811c9e0

  • SSDEEP

    1536:ODVspjkWkPsWK58KypTYd193gzCZLs4PLaXICdq51l8xcOFIXFqC4f4AYT88NHRm:OhWkEWK5cpTE3gzCZw4PM

  Score

  10^/10

  azorultdiscoveryinfostealertrojanupx

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of SetThreadContext

  behavioral1behavioral2