General

  • Target

    8bfc2e0724e7fec9ab7a122f58f3679b_JaffaCakes118

  • Size

    292KB

  • MD5

    8bfc2e0724e7fec9ab7a122f58f3679b

  • SHA1

    044782d01c6ed0293ece99b7dcafa999930e9494

  • SHA256

    f742740f23c746fd4ebfa69a6976fcf5c7e4bd4d88bb2dea8ea533ef0cc0b7f5

  • SHA512

    84418f0db68050f92e5c4a258a8f913ce96010f11c42296b49144b7fa8725dd69aec6577a57a01177039e1f9cd3b60846a1a079ab1a68609c454ccf1fdbd3946

  • SSDEEP

    768:o9m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJ9SzItdgyRArwAx:Jsq+Q1aZQuIyJp0mgA+FJTFQRx

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8bfc2e0724e7fec9ab7a122f58f3679b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections