General

  • Target

    2e154d88ac5205675be0514ef3f0de19_JaffaCakes118

  • Size

    21KB

  • MD5

    2e154d88ac5205675be0514ef3f0de19

  • SHA1

    7019a2bce2eeaf411abf67acd1c198e51d1ad2fc

  • SHA256

    2c3094ffd2490f5a28aa101967a12e6f80a09133d12dbd0b23376bde43eaab64

  • SHA512

    566e47131d8a831069eec005c225d4369616943afe0f6aa3d32232e8dc58dda18da676c669a8b52090993a248e2365c63ee78b4cf05aea8b9b25274fdbb8612b

  • SSDEEP

    384:nIdmF+Ti213fEF9QZd/cBr5M/gOjkaS4s/1k5YiZNlwPmVKU4WdD50pLR:nIsF81fG9QveLOYTe5YiSPmiWZ5U

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e154d88ac5205675be0514ef3f0de19_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections