General

  • Target

    b2dcd36e3b2c42bc3873a5521664387d_JaffaCakes118

  • Size

    301KB

  • MD5

    b2dcd36e3b2c42bc3873a5521664387d

  • SHA1

    615058feaffa72be6e120afb0ee1500ffb239bc8

  • SHA256

    fbad5bb1a6c2c00b8218e9839b4f4c694ff5a61cf8aecebf3b0193a3db19cc32

  • SHA512

    46a52defba34411f4cf4c4a857c819f8f60e2c85fdb2f68b0119250f91ce0ecda08bcec3c840f81f5cd5b6315e8889b3d8ae932be1166c331f7d9b81bff0ea9d

  • SSDEEP

    768:w8m1Sq4NQErBsH13zoisxEQ+srPimg5/huWwAIfng4aKR+P2crfxgbdLBdgXY+gk:ysq+QVslPiD0WMfPyf+L+qox

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2dcd36e3b2c42bc3873a5521664387d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections