xtremerat | d0a5e127f1ebe1e981e8dfa9f64de2f6_JaffaCakes118

General

Target

d0a5e127f1ebe1e981e8dfa9f64de2f6_JaffaCakes118
Size

301KB
MD5

d0a5e127f1ebe1e981e8dfa9f64de2f6
SHA1

4453c571a2781823cb03ce71f8526f50142e3ef6
SHA256

5808a3f782733ee2eeeb73e51213cedc0af02b94336b9497ed0a49d31c4ec005
SHA512

385a7c9177534dfe20f89485023afb2bc1d642161b8c9b35cb5d9fc531a5f8b3f6b8de22ba4c2be9c227f641b14c57fad5ea2aa8d3b8df811453320e87ed3abd
SSDEEP

768:W8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiiazof83Nw:ksq+QV4rObAdXWpf/y+qof83N0T2ox

Score

10^/10

Detect XtremeRAT payload 1 IoCs

resource	yara_rule
sample	family_xtremerat

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0a5e127f1ebe1e981e8dfa9f64de2f6_JaffaCakes118