Extracted

• • Target

    ecc9772e1ce10da67fa36eccb04facf4_JaffaCakes118

  • Size

    142KB

  • MD5

    ecc9772e1ce10da67fa36eccb04facf4

  • SHA1

    6f265558af304d0d24b75f92726412e2c58fab18

  • SHA256

    09f01c56f55ddcc492ab96f0de1660c3c247f4c452871582c37b084794799e13

  • SHA512

    0d4667d6ad4600cececff29a6191dffd02bf8806b6cfc08392a230e332c69721d3a48225ab17af29bbc56b70337715a4f277dcf035806992dfeb8c60cbdef9b4

  • SSDEEP

    1536:ALRD3bNqfNpu39IId5a6XP3Mg8afCqd4oF3Cgar3Pd0MZXiNjLoor:8R1qf69xak3MgxCZoMFr3Pd0MZXiNPvr

  Score

  10^/10

  discovery

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Process spawned suspicious child process

    This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

  behavioral1behavioral2