Overview

overview

10

Static

static

10

703d9dd6e4...18.exe

windows7-x64

10

703d9dd6e4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    703d9dd6e48e59c43a2fc8f6062b3078_JaffaCakes118

  • Size

    33KB

  • MD5

    703d9dd6e48e59c43a2fc8f6062b3078

  • SHA1

    9519db93d8fa0141c5eb267a18f249ca274f7d11

  • SHA256

    4605fd9ae95568099c00d7362ae69d96b4c6adadb522a9e15de076a8a5baef9c

  • SHA512

    d4c6028a5ae46bb17f8980b07fb037fab4e610de0101784778b253a4fdf7e7554acee5f5a35cd3a45d1d45db477cc21d98ab80b0aa830ba0c9384130bf2a21e2

  • SSDEEP

    768:wMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lytlDSm5:5NW71rcYDAWeotvXlwcm

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 703d9dd6e48e59c43a2fc8f6062b3078_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections