General

  • Target

    2446b42af339e308050f07241c43e04a_JaffaCakes118

  • Size

    33KB

  • MD5

    2446b42af339e308050f07241c43e04a

  • SHA1

    6b5f3c81b19017eec6d26e84d77279f067934234

  • SHA256

    2d538b6a8b03cedf6dc82d429d7d66712e9b4d1b3b6f1f5ba23fd1d05374ea0d

  • SHA512

    70b746a1cfb24839e12d6c11701f51092f269b4a4ef4c772795b4030d2ac3ec493c6d54f2c34b03f64f65e5226a4203a037d9e5382cc7970a229ac818df648e7

  • SSDEEP

    768:xMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rdN4sNxqdmers3:aNW71rcYDAWeoDrsEud5rdOEx4me4

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2446b42af339e308050f07241c43e04a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections