General

  • Target

    d3c2959f2b9f4826ef710c5c274206d6_JaffaCakes118

  • Size

    301KB

  • MD5

    d3c2959f2b9f4826ef710c5c274206d6

  • SHA1

    e3fe1fe9a8222176710ea87b7971595bacb367e4

  • SHA256

    2a35e93ce9a5bedb62129b85c4273df17afaffe8427e79037eed891f1068e5c8

  • SHA512

    0d16d6d09d16ebc5e8726b016f4e45fd5715e6403679de47eb16802047761384d3f1bf0219772e76d6d571aff239194aa1a7dcf12d7d08969a059ce8270feabf

  • SSDEEP

    768:08m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiigzoAgXYl:Wsq+QV4rObAdXWpf/y+MoIMox

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d3c2959f2b9f4826ef710c5c274206d6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections