General

  • Target

    08cb123ebfd3b2788fb761d1dc0c4c13_JaffaCakes118

  • Size

    26KB

  • MD5

    08cb123ebfd3b2788fb761d1dc0c4c13

  • SHA1

    43dc73f0845bd35e02575d49b99236161c6f922f

  • SHA256

    450072dc3d1e3fea2ca9b01295d47a3ff6b0c8b00045342a129f7c3f14895e15

  • SHA512

    08a596be961c2909998c23f7643c71544e9245f9a67f182f4d0c7b98b3fec3200cd5b64ec42097ce7cfa45510fba3dc19902cd1f67fc40f4b0ba4b82c2957c8d

  • SSDEEP

    384:Opj7eNmfp+UrM8j3Mk8mw2Qwz9cEVWNuOuuOYPq8P9iYwbzuFFmhqYK/lbr3:rmfpbM8j8wQwz9caAuxYyu3FwqT/

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 08cb123ebfd3b2788fb761d1dc0c4c13_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections