General

  • Target

    4ca92353e0f6fa049f3b33792f5bf4af_JaffaCakes118

  • Size

    19KB

  • MD5

    4ca92353e0f6fa049f3b33792f5bf4af

  • SHA1

    c2afd7a47b05073f2e026254ccd77c9f61fcb721

  • SHA256

    c6d7ce36fb38d7152a5aee64d56c133f591c8798645bb64adbd85e95bb72fcb9

  • SHA512

    7afa34889982c7e3a7538bea1c6b5124b23bf369ebc68f9f46c2257b8347fb92125f83c7343067c775125ac196a324dd2d1e1fa1c6f2cf525487e367d4d00056

  • SSDEEP

    384:yHKZfuH87GowDqGoMwevqxP6k6zIDwPVBSfQdohT8hBzP17R:fZfuHUvwDKP6kMpPdqQb

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ca92353e0f6fa049f3b33792f5bf4af_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections