General

  • Target

    f6589981ca7019f0155ab2f6227cdee0_JaffaCakes118

  • Size

    33KB

  • MD5

    f6589981ca7019f0155ab2f6227cdee0

  • SHA1

    11244f6ac09ee4d348bc36837c25680715c4c11a

  • SHA256

    787837b593676a9b5f5d1b4152af526a358f20293884d452fdc61521212c0945

  • SHA512

    f7b08ecb82c22dbc4e162faff1f58bb2c4996d0819334592f89a6727130110cb100a49bed3f18e0accde0369b1e1307cb36ba2b264ebbb0cf6bcc0ebbf9c7789

  • SSDEEP

    768:GMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lhtzS6cRW:zNW71rcYDAWeotvXlnJ

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f6589981ca7019f0155ab2f6227cdee0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections