General

  • Target

    c260c7413d2a0727a23ed783c6cef47c_JaffaCakes118

  • Size

    21KB

  • MD5

    c260c7413d2a0727a23ed783c6cef47c

  • SHA1

    5e7d086a4620b2117e3c3c1f70505ed19a4b0a6c

  • SHA256

    29ed3d89ef1ebf0ffef78b7b7bb0ffea3f0e9da50b9fe86514f6835e9ce8b8d5

  • SHA512

    5e654d8a3fca9f1315e77c784fa1a04ed7540127c32711a185662fad33ff572d154183248a47a33b9892752e98849f88b561f3b87947f5d80d0a82c8260f272a

  • SSDEEP

    384:EIdmF+TH95xJMu/0PlxjV8BINhuLJ37tMOpuqqz3KK7eIVmiVd3cZKJpKBpLR:EIsF8HdbKjV8BX7Vy6K7eIVTVd3Zbq

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c260c7413d2a0727a23ed783c6cef47c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections