Extracted

• • Target

    e764ff97ce442c538da37acf6b3b9350_JaffaCakes118

  • Size

    1.0MB

  • MD5

    e764ff97ce442c538da37acf6b3b9350

  • SHA1

    e5eecbc26df01d760907b77dcb90b1f0b98bffa3

  • SHA256

    0ea9cf0bd883474ef6ba82826db6dfc1b98c79a98f98a30af410daae7b99ed25

  • SHA512

    97037bafa297c13ee9e3e13614debb0d9f8841a0fab7dfa9f6ccf77c52aa747261662b6a286ebce441baa908081e2fa151b81215de42687f7241c1724bbb3a00

  • SSDEEP

    3072:8sOv8fESTARqUUCFt9/Ns8QDCaExTV1NTTLQETTaEykC3/hC3/:ZOvk/E1TQmB6

  Score

  10^/10

  bazarloaderdiscoverydropperloaderpersistence

  • Bazar Loader

    Detected loader normally used to deploy BazarBackdoor malware.

    loaderdropperbazarloader

  • Bazar/Team9 Loader payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2