General

  • Target

    1ba0fa70bbf664593f51591bd0afa8a2_JaffaCakes118

  • Size

    301KB

  • MD5

    1ba0fa70bbf664593f51591bd0afa8a2

  • SHA1

    3a83133e61f2946eeb1a513b111b88b6b4122f90

  • SHA256

    d431d2a946c684efe8a3a797dff4c81bcd3b62d297c80a1bbcff29d4f85ce2df

  • SHA512

    e543a3c1380ab9c0519f692dac98ff88e73ea5de21fd608abecda6597e0939f8df710a7b8b3fd789016c9b15c415c234aa2087eb2928a3493b5926f5a8d49cec

  • SSDEEP

    768:x8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiiNgBKiHgK:Nsq+QV4rObAdXWpf/y+hO0pox

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ba0fa70bbf664593f51591bd0afa8a2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections