General

  • Target

    970ba6fd64cafcf9e533f00a54574546_JaffaCakes118

  • Size

    292KB

  • MD5

    970ba6fd64cafcf9e533f00a54574546

  • SHA1

    75c7245bed1f29880b5c3111ce7f7cae2353d863

  • SHA256

    988c2d8fd189d53474b7e43c1f755badf3462451aa0a2d2b55cde4ac7f0c4cc0

  • SHA512

    6ffa7265bbc49cc7d73ca40e58672dcf79d3872737aa5da8bd291e320ede4c9167debb2830e0d9817bfc00c04501e9ec7bdcc7770027d1a9940f6e4e74e81bd1

  • SSDEEP

    768:s9m1Sq4NQkrBsH1U8z05DeeQuMVTyN8ipHo37Vmd6AeXVtWAJiSYKh9oLgyRAi/P:dsq+Q1aZQuIyJp0mgA+FJYKh9aF/e+x

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 970ba6fd64cafcf9e533f00a54574546_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections