General

  • Target

    71d5f54e4e245d088404eba6108ca770_JaffaCakes118

  • Size

    112KB

  • MD5

    71d5f54e4e245d088404eba6108ca770

  • SHA1

    0c14e01823e6c240b93542d0020bcaba2d2893e3

  • SHA256

    5527fd9c4a668e6a252b3e49aa0fb8a74533a33694acc686217e0b7e7f412408

  • SHA512

    c64044534332ab7f6e9c1688444de9993728bb166dbc8bfd0f2be9797f5d4983e64788d92cf38efe33a201967017bec19405e0974af42148721424798b7a1b86

  • SSDEEP

    3072:MGMgnsFgdz2UMrY53wxZxrLgpdu9HbwHPJPa:jMesup2U4A3I/UpdmwHP9a

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 71d5f54e4e245d088404eba6108ca770_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections