Overview

overview

10

Static

static

10

3e4a134634...18.exe

windows7-x64

10

3e4a134634...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e4a1346342094871c6cdc61673d739d_JaffaCakes118

  • Size

    24KB

  • MD5

    3e4a1346342094871c6cdc61673d739d

  • SHA1

    0765788601578ce4941417464c518696dcc04eb1

  • SHA256

    8f914f2f45cb93e379a99220bde03e6817245ddcdcfcc2e7dc2b4be33936f481

  • SHA512

    4f1e42ea1b20ea7046dc6761bf0f6733ef024070038f5bcdbf96c9aef147afd9495367ba0856ce8f45958aa5fbde2aa20bed387706ec24ddf219ef4533fe7722

  • SSDEEP

    384:MIdmF+Ti213fEF9QZd/cBr5M/gOjkaS4s/1k5YiZNyELPNv/WQ24bOz/HAdQPKDk:MIsF81fG9QveLOYTe5YirLF/W94ObyC7

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e4a1346342094871c6cdc61673d739d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections