General

  • Target

    d732f44cf71bcbd2da6ab821f2b80db9_JaffaCakes118

  • Size

    282KB

  • MD5

    d732f44cf71bcbd2da6ab821f2b80db9

  • SHA1

    d4d1ad5b5b8d5961e9bf2181a7b6218e43dbc203

  • SHA256

    70ce54c579f4f4d9498ce56ce9f07db6b41eda66d01dc48f3073651cb654bd9c

  • SHA512

    82e168264bb9c405a86338ce22932915bb087594fe7831fb7d7c352591dcd771e55a47a6073627af8a3b6ec6be230abb7279eabcc1967eeb61cdc3432f44f8af

  • SSDEEP

    768:sWc9quCDQyTZsnw0bCdovh1oMbFoUHS2NfcXXSZECgUXYX4N9cXLun/8:vc9quCDQTwM9By25DYOabu

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d732f44cf71bcbd2da6ab821f2b80db9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections