Overview

overview

10

Static

static

10

40b107a718...18.exe

windows7-x64

10

40b107a718...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    40b107a71805ea594a505660705afcd7_JaffaCakes118

  • Size

    33KB

  • MD5

    40b107a71805ea594a505660705afcd7

  • SHA1

    f9474b6dc786a7c314aa01907c765a6277d65702

  • SHA256

    14afcde38e2a17926b086153747e3292e128cc4a49c691e76c5f62f621ebd334

  • SHA512

    4ee084877ed570ee531073fa5a60bafd6a66fd779d9be06804a3611afbb4fda835d83b0d42b1306ac46a3bae6cdcb0852de58b37eb32f933e06d7d8b1286f211

  • SSDEEP

    768:gMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lLLSPi8S:pNW71rcYDAWeotvXlLLSPn

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 40b107a71805ea594a505660705afcd7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections