General

  • Target

    b5b4dffbf4715ffacf2606130ce22a53_JaffaCakes118

  • Size

    30KB

  • MD5

    b5b4dffbf4715ffacf2606130ce22a53

  • SHA1

    5c69445a0e4da2c822e83f3507c19ce2cd9da80b

  • SHA256

    e9354290f820a0cea41dba93b87c1c03da0687b058dde9a37071a7808d69de9e

  • SHA512

    a7fa708cf943571eb1e2ec85a104fa268955e5d74bdb43393eac11aa3496e6f5123c032f4d0a555b3065f8cbe08be821f3a1279928a9e1063c13e9903ac48e69

  • SSDEEP

    768:l4l/50VTed7NY+K3LeJPd2lVMG7Rxrl4U2sJD7OPZiDy:LTyu7YOMqRvBD7cUy

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5b4dffbf4715ffacf2606130ce22a53_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections