Overview

overview

10

Static

static

10

0e4ab1700c...18.exe

windows7-x64

10

0e4ab1700c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e4ab1700c2ecf769052483a8a06a800_JaffaCakes118

  • Size

    103KB

  • MD5

    0e4ab1700c2ecf769052483a8a06a800

  • SHA1

    4a37173b9f270b2c34e73b88ed0edcec84019659

  • SHA256

    cb17cb46068290fbeaa7229976ecad0e9138b21dbbf8a40e4bbef15aede84a7d

  • SHA512

    453dfdc41f0307e8d22b9213b9fe05ae32ef0a64a27d54046ff5e34b983742d28cbc8829affc6fdea74396338e387a2bf87348cf4ddeb9039f80d924ee35344e

  • SSDEEP

    1536:S2v2G9VvW23RirYerqQozVXovsmQ8HFpvYRGvrzZeemx9FKN5rmv4YVu:Sw9Jt3gIQ4EsmRrgcvrmxvXp

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e4ab1700c2ecf769052483a8a06a800_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections