Overview

overview

10

Static

static

10

a56d994878...18.exe

windows7-x64

10

a56d994878...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a56d994878f3bc4ec5ebce6e5575fce9_JaffaCakes118

  • Size

    287KB

  • MD5

    a56d994878f3bc4ec5ebce6e5575fce9

  • SHA1

    9a0afba4218a57a28e2eeb0c4d88f5d440c6c5ba

  • SHA256

    8236316d35890e5babed363d5da217b73224591a35de18a62522ef46b720e102

  • SHA512

    84eb3007561d5cad75a8a4ff8f0e7207ed4178fb5f30e16e9b4866cb24b7f80253976251b214fb2a2794a883f8b6b097b408978637f6fe53c6d84047a7667d1b

  • SSDEEP

    768:GWc9quCDQyTZsnw0bCdovh1oMbFoUHS2NfcXaCSOgUXY1HmH7kWiGvxlbPrpwZ:Fc9quCDQTwM9By25MY1GoWiyCZ

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a56d994878f3bc4ec5ebce6e5575fce9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections