General

  • Target

    d33b2dbe609d3f199dd29ea8904411fd_JaffaCakes118

  • Size

    20KB

  • MD5

    d33b2dbe609d3f199dd29ea8904411fd

  • SHA1

    4cd014ed57df9307c1eb98353c71fe2fa1507557

  • SHA256

    67b1f9a34c5e313c4fa873982ade951f47e650ebac7fa13caf91b2bc2c86318c

  • SHA512

    a973711e739b53ad4999847b85fd7843bf492c74dff825ac8f57e9ae994393061b7cd275511e4900e031cda08f47fdc0ec68a698e32b978d4af5e69dee7b9894

  • SSDEEP

    384:oIdmF+Ti213fEF9QZd/cBr5lholKKNW9j8MKy6Kli+9+b9eeyZYlbHgwDTOLR:oIsF81fG9QveThAxN+l3wb0dZEjM

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d33b2dbe609d3f199dd29ea8904411fd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections