General

  • Target

    c0f67c645ea95e55d33d3bab165e1e20_JaffaCakes118

  • Size

    301KB

  • MD5

    c0f67c645ea95e55d33d3bab165e1e20

  • SHA1

    f65df8089e127e5e6e448fcd02c844ff3f3dc3b6

  • SHA256

    c499b8e4ad898644b8be051e9c8191448c1db785e086b39a96fad64eeec8060f

  • SHA512

    382be4e07faeb19cceba96446f22258ac8a99b0ead53e29e14619939919da5553f7dfbb944efcd3f7ca7ca2efa7c8db50e0bc12bdc94b1713be112b538c18553

  • SSDEEP

    768:P8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiiEzoUngXP:Xsq+QV4rObAdXWpf/y+IoatMaox

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0f67c645ea95e55d33d3bab165e1e20_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections