General

  • Target

    577ddf37a84b2b440f0fae1eed6812e9_JaffaCakes118

  • Size

    57KB

  • MD5

    577ddf37a84b2b440f0fae1eed6812e9

  • SHA1

    a9a2fd844bcfffc4e2ef33ffcf44d58a11747f9c

  • SHA256

    e5d19b6c58fbe27ab9b675fe02eca911c71ed3e41f76af0277d7a66e3f888f3f

  • SHA512

    d88337eb244c912641c713ac94ac0c0d85423cedc6023987100bcf9f7617c4c1542cd54734d191ab01b1a7fab01f936ee387e6adebdb27010012ea1f4ac6d101

  • SSDEEP

    768:YMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l3tfdO4ROd51bcgBH5T9Zztj7Czrd:xNW71rcYDAWeotvXl984Ramg5Tf9u82

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 577ddf37a84b2b440f0fae1eed6812e9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections