Extracted

• • Target

    JaffaCakes118_775defd0f91aa93bb34e25298a61fcfa

  • Size

    296KB

  • MD5

    775defd0f91aa93bb34e25298a61fcfa

  • SHA1

    a9a80126bb3afd694d378031ebd934804023574f

  • SHA256

    1526e3220534ec2572c5fdff359332b219c5807d4ff7055dcb4a75e2017eb4ab

  • SHA512

    3224fbb5068584108fc0218a6136d9cf7db63ee55cfc24907302a7bbcd9fbf1ea989da635245fa837ac9a55db7c57bc1d3c8126a5d30d51484a5d1e14a7d61f0

  • SSDEEP

    6144:fOpslFlqwhdBCkWYxuukP1pjSKSNVkq/MVJbU:fwslBTBd47GLRMTbU

  Score

  8^/10

  discoverypersistenceupx

  • Adds policy Run key to start application

    persistence

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Adds Run key to start application

    persistence

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2