General

  • Target

    085ee720bb3fb62364115acf6446f763_JaffaCakes118

  • Size

    301KB

  • MD5

    085ee720bb3fb62364115acf6446f763

  • SHA1

    593a694b3caa3a967986d07c51fc9684d4e3e671

  • SHA256

    628f9e18a1135e98c9f8ca669624dcb2b8253d5030eed6fafbd6b1035eab92c2

  • SHA512

    3804f13fbc615f7abd1ac4759ff9a7d6a8e54454c50290b96b8d007b504a54170e5eba324130fd5b052d8e26496cd72c30f6a9429975b914a9b9ccc0b3ec466b

  • SSDEEP

    768:U8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiixzo4/1N1:2sq+QV4rObAdXWpf/y+Vom0hiFmox

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 085ee720bb3fb62364115acf6446f763_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections