Overview

overview

10

Static

static

10

43b5d544f4...18.exe

windows7-x64

10

43b5d544f4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43b5d544f45b742cb9eae9cebc49a6f8_JaffaCakes118

  • Size

    21KB

  • MD5

    43b5d544f45b742cb9eae9cebc49a6f8

  • SHA1

    cd9fe29de3c8f9058c7d0a4a18568dd1df633230

  • SHA256

    997e481c17d4aa3e21b13f5796f21cf135543b7b285a74514286fddb35832cf6

  • SHA512

    4ebfe1f1abb069aabcaae1b2863f51d1e26101262a9d0f79590c132140d3e92912ee4a6595a03349ee850d01638421dca69dad99289d61231b1823395f5c6677

  • SSDEEP

    384:xIdmF+Ti213fEF9QZd/cBr5M/gOjkaS4s/1k5YiZNlppQ4/oylMn0pLR:xIsF81fG9QveLOYTe5YiHpQdU

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 43b5d544f45b742cb9eae9cebc49a6f8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections