Extracted

• • Target

    4207f403a9addc60feb5b3cb52b952be_JaffaCakes118

  • Size

    3.7MB

  • MD5

    4207f403a9addc60feb5b3cb52b952be

  • SHA1

    15a65609f1da1501e3d6b06d1a24a0faf16c49cc

  • SHA256

    e297680ce37552923b91f75b8cbd6d19d2d615acf25cd837e5ce53a32d2c6306

  • SHA512

    f7241cb02ace9e92d788c88aa57f6c1f43bb89fb360021dfd490e72d4c8d81aa6021807bec316b63c902315a87c63ac0160e64723fec52a472ddc470f1218799

  • SSDEEP

    98304:OAYRWJ3guzrI7fiL9tgZZEkpDwyPVg1b3QOQYRitH0RSXJgGCnUMW8BMHDWXN:OPWLr3gzNPPVg1brJRitJ5gHD7mO

  Score

  10^/10

  upxazorultdiscoveryinfostealertrojan

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Executes dropped EXE

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2