Extracted

• • Target

    a14a8ecd75ad6cb047a3a08333e52393_JaffaCakes118

  • Size

    35KB

  • MD5

    a14a8ecd75ad6cb047a3a08333e52393

  • SHA1

    2936aed68556210be5e98283e890acc43ed03527

  • SHA256

    ac30d7e2c9fa2edaacabbd13fe4bd77ab3a02632019a83145b711ac5cc47af14

  • SHA512

    5bcb20890a8f7e483a030d1a676bae433d767f012bc906795c47151f0a2c769f013ed23ae416b9fb77c1a4989c70cc7f38a2e32e550356ffd628807578dbed4d

  • SSDEEP

    384:IBzhu1KO2jIf7kqbXdC3mD5z4onsND5DXP0M2vYCAGykBRSG/u/Ub8S6rDqnv47Y:suCkdC2D5z4oWV0OCAB4Rld8Inv47

  Score

  10^/10

  metasploitbackdoordiscoverytrojanupx

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Drops file in System32 directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2