Extracted

• • Target

    28b461665206cde9c350ad0960b6dda0_JaffaCakes118

  • Size

    204KB

  • MD5

    28b461665206cde9c350ad0960b6dda0

  • SHA1

    cb21b534c2e1d4315b6f175e0df335453a3434eb

  • SHA256

    8e022fdca537d43fddf5758fa9fb8ace0e146b6d14345ddc4dfe893f2453f98d

  • SHA512

    cdf2f7bad7617668c92fedcbe78dd7fc835591ed197cbea7f9627156022e476a6d653f84c36a2b18e58b89bd0291a4370b3cc8722d071c921181a54a81871966

  • SSDEEP

    6144:u8LjGGm5UA4ewDqeUMaadm9wg1+oWrJMfs4ON:7GIojBO

  Score

  10^/10

  xtremeratpersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of SetThreadContext

  behavioral1behavioral2