Extracted

• • Target

    f167679c2782480fba76c01525b9dbb0_JaffaCakes118

  • Size

    148KB

  • MD5

    f167679c2782480fba76c01525b9dbb0

  • SHA1

    f106f058f862ac50d5248b5d0fc8273832f9b2d2

  • SHA256

    cc3f66fdc56241dee60ec8e58ee2ca7c09f828e320a68ddf9426d8a3d8f77986

  • SHA512

    fddd9ee3773169e56f21c56dacaf3310b5e8d2e364f312e1a9b242fe3c208c6e312143b59b3094afbced621c03d8016610dc3471c311c70e7630368737378c47

  • SSDEEP

    3072:JYAq+Bt0h0phE8M4qTvpmwEBn3Obl4kUGE84NXafk:JYtipO4qTvwwm0KD/ek

  Score

  10^/10

  metasploitaspackv2backdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2