General

  • Target

    7709985e57cc800d9351900ab2a300d3_JaffaCakes118

  • Size

    21KB

  • MD5

    7709985e57cc800d9351900ab2a300d3

  • SHA1

    5b8790e57d487c0b8a09f95b1c2a63f6e31f0320

  • SHA256

    b555a1f4148f236527521e821c0d4b98afe68918011ed92eb3cc2addd3d377e5

  • SHA512

    495369c51a84a7a1469e5bbfb2e14c6f4100f74192106218072cbac3b382724cef44d8e0e7e9ada0d2657bc47702700b3ef9621d5ee1e1e440dd5d8d552f66c3

  • SSDEEP

    384:tHKZfuH87GowDqGoMwevqxP6k6zIDwzVPDlUeO+UROATQseR:YZfuHUvwDKP6kMphPD2E+OW6

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7709985e57cc800d9351900ab2a300d3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections