General

  • Target

    0f6331cd0e5247996e27b10baefc14d0_JaffaCakes118

  • Size

    265KB

  • MD5

    0f6331cd0e5247996e27b10baefc14d0

  • SHA1

    106ffdf5ae253b29bb645fef3e1a00376d8d68e1

  • SHA256

    ccd165ca96d79a3ea1fcbb9e5594ab74465436b02c063111c0ef7afc45cd2f47

  • SHA512

    561c11041cddf5fa0ba4ae25aa184773de4c8364efb67c72132a4287b9a40906963edb7108513c1ddf03d413a127c2e5f1d2673740bafe159817cbff7c2febd1

  • SSDEEP

    3072:Vdz60ZPtWI2VJVic4V/gfSHesi98ln8j5Y:Vg0ZPUI2VJMF6rJs8jG

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f6331cd0e5247996e27b10baefc14d0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections