General

  • Target

    0aa9ebc077da552a44da700c060285dc_JaffaCakes118

  • Size

    44KB

  • MD5

    0aa9ebc077da552a44da700c060285dc

  • SHA1

    570476726927d01bf1abba71a4d1c835ad1d2a27

  • SHA256

    37cdb3a4e78d83981e42e84eb0dabfa4838132b3cebead8d67542112f10ecf94

  • SHA512

    9ca265953ff76a87fb7a7f4d55227a1f22d69d47945fe7afc7d8382c05a22b6414f66f90147ad4516c67f996327e79ceba6af9b7b97b3dff5d800ecb9810f321

  • SSDEEP

    768:HMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lkD4INvbNB5u:sNW71rcYDAWeotvXl64INvBB5u

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0aa9ebc077da552a44da700c060285dc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections