Overview

overview

10

Static

static

10

baba833aba...18.exe

windows7-x64

10

baba833aba...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    baba833abae9f2d073a8b4e722dfa9b7_JaffaCakes118

  • Size

    31KB

  • MD5

    baba833abae9f2d073a8b4e722dfa9b7

  • SHA1

    e15b9a312608fc5cc4b41f9d768ae7ed0eed3845

  • SHA256

    f6b7f472e98382d6bd21d60ab0071052d8cd5e5331cbe2d7f60f9900edeeb091

  • SHA512

    94ad3634d929466f7d9e41f300aa99d1b61d9dbbb90f4055a08ad8f3d59552187140c92d3f8cec91b48364f3118bb419a3fb1cd263650953e012c6c525a6d140

  • SSDEEP

    768:TsuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jcncZZJQj34a:INW70x6ALBw5c/q

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • baba833abae9f2d073a8b4e722dfa9b7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections