General

  • Target

    7436695e95c88a39b67f219831bbe738_JaffaCakes118

  • Size

    37KB

  • MD5

    7436695e95c88a39b67f219831bbe738

  • SHA1

    72cd11d39fa639362a7cd23982fd966cb2b2f3f6

  • SHA256

    f50f169cbde13b9a581e2b29c52c7360f6ef96986fd81ab4602659046ea7244c

  • SHA512

    2bcc1ebba5f55625c61b7c739c884a1e9204f6e3525e1b0c5d90a4ae44878a6ab38a706dbb6b359852da2b9fa862040143428575a7db79823f894db6035d58e9

  • SSDEEP

    768:nMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l4RtzfoYU8/0Kp:MNW71rcYDAWeotvXl4XJH

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7436695e95c88a39b67f219831bbe738_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections