xtremerat | 0b5996de39d90d86a212b27ef2550128_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b5996de39d90d86a212b27ef2550128_JaffaCakes118
Size

42KB
MD5

0b5996de39d90d86a212b27ef2550128
SHA1

2285df6585f2ea1bf722641b35af318934b4b837
SHA256

22c4906aaa94cf6ab19ad840d822bda93558e785f9165e728b95c56b04abef5a
SHA512

8fd1eb733847936ae9819ef1563dbaa90bfa5a87cc2af7e262075aad317626f8c844b6a87b1c24ffe82214f29f2253757935ec8fae9c69012c5768f207bc1bea
SSDEEP

768:kENhPh8072OAhKow2GkmU3MG/pfzNBw3ldpzo5od:kqJbaO8w2GkmPG16ldho5W

Score

10^/10

xtremerat

Malware Config

Signatures

Xtremerat family
xtremerat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b5996de39d90d86a212b27ef2550128_JaffaCakes118

Files

0b5996de39d90d86a212b27ef2550128_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2448.0MB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ