Extracted

• • Target

    1856aa8a0c121179220997087fc132dc_JaffaCakes118

  • Size

    93KB

  • MD5

    1856aa8a0c121179220997087fc132dc

  • SHA1

    31051ced099f8b7d33139a108b8a2d9de6ed28a9

  • SHA256

    ebae49ac86dbc05cca0cc36b2c7a2b59c01e38ca001b45197f9435c1b6c856e7

  • SHA512

    fd14103c0177738428404e979ffee8ccb3301c2dddd19b6cccaba7f748d4bd050fced199c9715409724d3f2df39660345ca7525804f7cfbaa0243e2565315816

  • SSDEEP

    1536:vIv9BxMHBZTgSx1P2/1miiwpQOSsPdqBou6E80:vIv9B2HTW4iiwmho5ED

  Score

  10^/10

  xtremeratpersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of SetThreadContext

  behavioral1behavioral2