Extracted

• • Target

    dc96026d1f06d15c060b721e759b3833_JaffaCakes118

  • Size

    305KB

  • MD5

    dc96026d1f06d15c060b721e759b3833

  • SHA1

    210f112ee8fa9662e9ff469488a6ec8d96e79090

  • SHA256

    25e271e4b0f36eb99f681019aca65ae88f25e5f93eed199507723138c3a6f16a

  • SHA512

    ad74faae3667ce9386b310f62cdcc7daf109843cbb8ea38414539b00c74b422d9278c2a668531ee3bb0177ad8c8abef5d40ce750dcc65cfc23441df7866b3375

  • SSDEEP

    6144:XdjgRNs6FobXrGFpGn7QmZfjB4kdp3aeH/zn2JmgWhCxIKMRA+:kbpGn7QmljLsmBrhCyVRr

  Score

  10^/10

  metasploitbackdoordiscoverytrojanupx

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory

  behavioral1behavioral2