Extracted

• • Target

    dc59a3a35a064bd33f7f3495e9930969_JaffaCakes118

  • Size

    151KB

  • MD5

    dc59a3a35a064bd33f7f3495e9930969

  • SHA1

    d25906ddb9f861ecc70e77cb6a95cf78016c2832

  • SHA256

    9c005d1b3ad1d066b48cd6c31d77984730431c68bef00f7fd2837d791091150d

  • SHA512

    9a0d6a29c10e3932760cbbd9306744150e538486e6d9c959d08d11ba92a810324f73ad7b7df6a174aeb1bee8a753790e1b082b31fd3dc71e8696f39864effe24

  • SSDEEP

    3072:eYAq+Bt0h0phE8M4qTvpmwEBn3Obl4kUGE84NXaf:eYtipO4qTvwwm0KD/e

  Score

  10^/10

  metasploitaspackv2backdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2