Extracted

• • Target

    b03627db633e6382c41f5cff821d496f_JaffaCakes118

  • Size

    53KB

  • MD5

    b03627db633e6382c41f5cff821d496f

  • SHA1

    c5e9e3608825dd6aef04f9ca047eef7e473f3722

  • SHA256

    064d3c92381e1c4c679f3a503d0876037ebda11d80cc1d4ad2b35460ec06b8b5

  • SHA512

    49ef3ba94fc286ba277cf48c4621dd2fab72e2b74ffc681abd21a25d2532c219d74d8015f3f173a078bdef127911f474967d48c678642269fab4b55918f26a41

  • SSDEEP

    768:iRDI8VhZpDRFzvBOrmuRF9YVG5t/fuZUgDBTFs4MzrOA1E0lhVOCFWBz:iRDv/4mS979oDlG4MPOe5j

  Score

  10^/10

  metasploitbackdoordiscoverytrojanupx

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Metasploit family

    metasploit

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2