General

  • Target

    d6f464d4ae724adb327e7c774fba2e28_JaffaCakes118

  • Size

    331KB

  • MD5

    d6f464d4ae724adb327e7c774fba2e28

  • SHA1

    b536bf68fe54da9b8380125525254c5b626c1748

  • SHA256

    66f226826c03a10a43417d6394de6e46b03a6a682c38c915d3773c24a3f1ebb6

  • SHA512

    c8a6f20580d935e80b9f514ec9fb2c98845afb79f86fd5231b88c8c7bfe3fdafbf28a005cb02a4cf7e66b3cb204356f1daff14af4f8c2840d0f143954b72e8a2

  • SSDEEP

    1536:Wsq+QV4rObAdXWpf/y+yomL3ed6mg5Tf9u8yeotvd4ox:X44rj/Hom3edjgZfYMotvOox

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6f464d4ae724adb327e7c774fba2e28_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections