Extracted

• • Target

    fc73d2bf6ecfa30a0589bc6aa512b705_JaffaCakes118

  • Size

    697KB

  • MD5

    fc73d2bf6ecfa30a0589bc6aa512b705

  • SHA1

    9cdda53512c5a0dca9a7d58ded8c27c0bbdc7d8b

  • SHA256

    bc6113d527f7a013a5891650459b5665ffca799fe363c1d14874e739715d2a4a

  • SHA512

    180d9cb1c09fe244f51aad1bc320e0ef97bc3efc91e7c0aaf7091cb3d63ea292ab9794f8bc82c9cfd40434d3cc3ce7ca242a6a8e5f69240d6c0cedd8aa6adcf3

  • SSDEEP

    12288:OXcsbdeMdJDYnlyTgenzU157cfGZ/9u4RrW5Sh5K+H/B5NJtqLuCsOlgcje1t5LR:OXcsoIYGA77cfGdWSh5K+DbtqjpjeNCO

  Score

  10^/10

  discoverypersistenceupx

  • Modifies WinLogon for persistence

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2