General

  • Target

    fd379a7beff04cde796feb4bf01853df_JaffaCakes118

  • Size

    301KB

  • MD5

    fd379a7beff04cde796feb4bf01853df

  • SHA1

    2d827a22bd4c5b2d6a7bac691a6544aae8a0a37e

  • SHA256

    59768fb0f6959ad0b5bdad7d18bf5b51e730ae6bf9f9238d44e38f2f98d51e17

  • SHA512

    cb07a04b4a2bdc070a39855974a59f03e34faf6723e54e084fe65d8be688232e0bd754c7a1da28852facbba26cba0593cbb5f90076741cedb2d012340c83e7ad

  • SSDEEP

    768:b8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiiqzoSu8g7:Tsq+QV4rObAdXWpf/y+yow9ox

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd379a7beff04cde796feb4bf01853df_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections