General

  • Target

    15d711be33ff76b462273a45c1c12acd_JaffaCakes118

  • Size

    21KB

  • MD5

    15d711be33ff76b462273a45c1c12acd

  • SHA1

    e40e21b5d5c184bca9597c94fa97f97741ed1487

  • SHA256

    69e4714aac41211cb0c2045202039439cfca463f1ae45541af699167d0a096e5

  • SHA512

    9d9a8ad14338df56b39e81477d576d379e49c008bfec520949f09df8beba5e0ab71f74a829c5a2f8536fa2c784b1fde6146a64cad14fc45381aa267394364a77

  • SSDEEP

    384:zIdmF+Ti213fEF9QZd/cBr5M/gOjkaS4s/1k5YiZNl/3S2wDT2pUQPYzZhpLR:zIsF81fG9QveLOYTe5Yi5S2FpvPYzZd

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 15d711be33ff76b462273a45c1c12acd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections