General

  • Target

    dd08511b35d6a6b91eb13bc944dd1d6b_JaffaCakes118

  • Size

    78KB

  • MD5

    dd08511b35d6a6b91eb13bc944dd1d6b

  • SHA1

    aeae2703f17872da5fd1155c6d977beb4feab2f3

  • SHA256

    8b97ca299b82de30f10096dcfd1bb261a8ca54b8ee9beef53cf49813075cd595

  • SHA512

    eb2417462326fc09c24b48f9603656cf7bffdc4c019c29c5f9c01455dcd58328dffeed40c057bc121bd3a44ec007b65eb3c6116306848c85a6dec7419e508c4f

  • SSDEEP

    1536:3NW71rcYDAWeotvXliut1YhuyeHqGI+n+k2w2v0+v+mOtJlwxL:3NW7dEvotvX0ut1qecxdctJW

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dd08511b35d6a6b91eb13bc944dd1d6b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections