Overview

overview

10

Static

static

10

c0032b03aa...18.exe

windows7-x64

10

c0032b03aa...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0032b03aa940891db0b944de95f2595_JaffaCakes118

  • Size

    146KB

  • MD5

    c0032b03aa940891db0b944de95f2595

  • SHA1

    19042ef39e935c2b83661ff8c8b2b2be41537fb7

  • SHA256

    a187ac5e67315035b09b5ddcc30dab250ae82ffec8e1852f7d52659fe60f12a9

  • SHA512

    7610ee5422987c72c19d6c133abcbaa2e7d1d849d892598251f54dbcb0defd4a601d1d53b68d773eff7546bed6ccf85134789219fc54898100fcc6f7726f6e66

  • SSDEEP

    3072:PtFw9WphtshWBp0UQIu96GA/VxKcRzZGC68hr7GUDdE/Q9DtNX89:PrwopXshWBp3OEHjzZGorSGE/Q9D09

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c0032b03aa940891db0b944de95f2595_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections