General

  • Target

    067b7211634d8cfdf38c9eb0c793ef59_JaffaCakes118

  • Size

    19KB

  • MD5

    067b7211634d8cfdf38c9eb0c793ef59

  • SHA1

    78761486da534215eb258898a4ac26bcaebad6ae

  • SHA256

    6d66832b06fc2ce0a8bbe2bf035f765b3e8482b516494d1a12280880b769952a

  • SHA512

    d5fcb4cab5c4a8864ab9fd0ccd2d224f2c94acae9e9276664ff5b7d4a231fc77ffe330442b8270fd0d4402d09fb4b63306a4b84d62489a5803e28d55b10d1c05

  • SSDEEP

    384:CHKZfuH87GowDqGoMwevqxP6k6zIDwPVBSHZGuwqiJUp5q7R:PZfuHUvwDKP6kMpsGuXZpu

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 067b7211634d8cfdf38c9eb0c793ef59_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections