General

  • Target

    65d14ade8fdaf1f91fe1d5da0df81177_JaffaCakes118

  • Size

    47KB

  • MD5

    65d14ade8fdaf1f91fe1d5da0df81177

  • SHA1

    c19511befdfe04f72d67775927b83c55816c6c48

  • SHA256

    71b9816092c2884016e107f7ac2fe80398147fcf5141c577c82d99f847c3d878

  • SHA512

    09d7a261635071de3afb43fd88dac3329dae53dd098cb6c5dfe4c5e5bf0fb867318aace0c0ffccbc22efe4fd27948d3b1f7ef1fc6c1bd3c48634689362da698f

  • SSDEEP

    768:qMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l2vg0S1izXuWcKajswBP3Xtc3AcR/:XNW71rcYDAWeotvXl2vg06fFBu3pR4V4

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 65d14ade8fdaf1f91fe1d5da0df81177_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections