Extracted

• • Target

    dc54cc5c1eca9c94f39d0b663da49ff5_JaffaCakes118

  • Size

    149KB

  • MD5

    dc54cc5c1eca9c94f39d0b663da49ff5

  • SHA1

    90cf8194fd9f19c869e4a611d59302bdd16dc558

  • SHA256

    eda1658dbfc93eb3dc0a72cd52d96069c2ffd851cbac235efdd16533e84a166f

  • SHA512

    a2502a895e6ccad085342a3d110a6c5f1bc35b220af2ddef4355ea63ee06ca71f4561e6ac27863a55aa439d4b4e98658b35928d9de32717d97b91c486bec440e

  • SSDEEP

    3072:JYAq+Bt0h0phE8M4qTvpmwEBn3Obl4kUGE84NXaf4:JYtipO4qTvwwm0KD/e4

  Score

  10^/10

  metasploitaspackv2backdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2