Extracted

• • Target

    f57a11cac2e02203e553ecd6647beb08_JaffaCakes118

  • Size

    319KB

  • MD5

    f57a11cac2e02203e553ecd6647beb08

  • SHA1

    f656e96c4f003e5ae036497e6a199ceb89c031e0

  • SHA256

    b9319fa58927513f75c212bb9e86ba71915b9473161ca166b22e999108857686

  • SHA512

    23f09278b40d73ac2d762fa7c1205e57a895cd5365d3c4a582460a082bd2af8640b8f51ee57a5800cbdec27450495bb4bcf1912c47cdbecf5f55087b29a019ea

  • SSDEEP

    6144:l94S1O1/1FPpnjxzj8SRemeRBYILKpJOito/Lmq+fu/ZWT2tHR+weaZ:34fn3g8emeRLK5tfuES2a

  Score

  10^/10

  discoverypersistenceupx

  • Modifies WinLogon for persistence

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2