General

  • Target

    101580a7ef5e263fa060f3f954756c84_JaffaCakes118

  • Size

    280KB

  • MD5

    101580a7ef5e263fa060f3f954756c84

  • SHA1

    d136f4fb180a0e34f04b5705b6e2da0755e519b8

  • SHA256

    1f9d9ce0c49fcb64c5a2a059f03eed655fcd86c5e0618ce86525626f98ab3c18

  • SHA512

    8c608c587ced113a0e8261124a29e60791d6497284ec75d6e9cb972ec5553bad33d3f3362ea3e4a958bec04527247b55838daeabcc555ed88cfb12ea45d7c765

  • SSDEEP

    1536:hYd58RXLbUcaArrrrrrrrrrrrrfvC8ak3g4mv8x+zSBoCtCW5x/1djrrrrrrrrrh:hYF0ak3g4yeobMxtnak3g4y

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 101580a7ef5e263fa060f3f954756c84_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections