General

  • Target

    433eba652389eabc26f1610dc69c2851_JaffaCakes118

  • Size

    33KB

  • MD5

    433eba652389eabc26f1610dc69c2851

  • SHA1

    5f0d481dd7256f9f191c899d17eaa24a1db52d9f

  • SHA256

    667530b56682fc86c63714f43e146879876e6185bf393d64122bfac52eee2d0d

  • SHA512

    f23ff94df7ff34e46e254be68baac84452039f4d920f740501b6de54dfbbc782f85aa1b07d4c6cf8cdbe8f3c0ad99d928889e1edd3f2c8c62fa3dab494c1bb1f

  • SSDEEP

    768:CMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l5pfE7lA:/NW71rcYDAWeotvXlDUl

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 433eba652389eabc26f1610dc69c2851_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections