General

  • Target

    7136c7dde9202c45cb7d042747e7d6bb_JaffaCakes118

  • Size

    46KB

  • MD5

    7136c7dde9202c45cb7d042747e7d6bb

  • SHA1

    40e0544ea55a886c1add40a7a393bfee1a75b58a

  • SHA256

    7e0f8a8d75ee734dc905da0a9d58382e5aec766f3755406a7622514c77267f55

  • SHA512

    dd91e0949d33ff1af409cc4bd77251e2aa374b53ffac79bd5920b58bd88bf2f123be678d26b79fe52e520ca70aea9440236f906054935c1602e1ba23b0c388d7

  • SSDEEP

    768:OsuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jm1hdp/nicpKwGmOCWHxFBAo:LNW70x6ALBwl1hPic/GmQxF

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7136c7dde9202c45cb7d042747e7d6bb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections