Extracted

• • Target

    eab699eac197429f125af077a30e363a_JaffaCakes118

  • Size

    621KB

  • MD5

    eab699eac197429f125af077a30e363a

  • SHA1

    e0955cdf4e563eaf28a9038173ad88e6a9835ef7

  • SHA256

    0a382c1a74a1491bd21e734e36bc9250f91f7e87ca7646bec5ca03a17fedc97f

  • SHA512

    193f5674ad3aa4118e1405bca83268c1bfaffd4e208c79e05fec419545a1e859bbadda457856948cd17792aff0096d5638fd4c0dec737b4aafcd35e776acfba2

  • SSDEEP

    12288:klNHUskcoihNNcTIXco2yRmkWbNdCWQwBDVZq3MCjptcVdsNfGJ:EUryFcTIXco1RmxPC5qVZogsNfG

  Score

  10^/10

  discoverypersistenceupx

  • Modifies WinLogon for persistence

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2