Extracted

• • Target

    JaffaCakes118_9314f65499f79c558bccbe887b047aa7

  • Size

    903KB

  • MD5

    9314f65499f79c558bccbe887b047aa7

  • SHA1

    186a3a1779e47299a768d67991679d925b256e5a

  • SHA256

    6d04dd4a1d84cf6eecc85cdd7e11c67863dcfbddada167247c7151cdc1591ad4

  • SHA512

    1f0a86491d10bdfa3260bcec84ee399e87c83e389bcb796390aad3d1ab721fbe173decd41dc4538f4169e7c4fcbd3830a43de74cf3f847b834207a0566542990

  • SSDEEP

    12288:lR0c4ZX6SKdo7YNQR1F85ZwKd89BcFFt5KaHpXNpbyk87onjVUDX4UI0:Mc4J6+wQ7yEvO75pH187onjiDX4UN

  Score

  10^/10

  ramnitbankerdiscoveryspywarestealertrojanupxwormsalitybackdoordefense_evasion

  • Ramnit

    Ramnit is a versatile family that holds viruses, worms, and Trojans.

    trojanspywarestealerwormbankerramnit

  • Ramnit family

    ramnit

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • Windows security bypass

    defense_evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    defense_evasiontrojan

  • Drops file in System32 directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2