General

  • Target

    45fb4741695f822aa57c8a627e3c4644_JaffaCakes118

  • Size

    69KB

  • MD5

    45fb4741695f822aa57c8a627e3c4644

  • SHA1

    e6beea41d1c378430f4a4ea40196242637304d34

  • SHA256

    c6e18470596605fd228691c85793ac402606d7e61fb1461fff4530b9fb71fe99

  • SHA512

    837af4024d958974d0ed42c05d135b281ccbca13e6a158a9ab965c7f32d1063153c928a2b7f25f236c5992fb36680bf0f53b8b84d8a0f60f724054510d4ab88d

  • SSDEEP

    1536:UIsFw9veLJToUN5YH3617MYUQKEVzA7Yfij8OZwM1tAx:UtFw9Wr583cgOPW7PGotAx

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 45fb4741695f822aa57c8a627e3c4644_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections