General

  • Target

    0aac45dc375dd21bec6f697abedb42b6_JaffaCakes118

  • Size

    33KB

  • MD5

    0aac45dc375dd21bec6f697abedb42b6

  • SHA1

    86a533489ebdeada45fcce9be109cafda0b052a3

  • SHA256

    f9cd7a8f9990ad24321971f770da6d5236b7ac54cc14ef5b2f69c033ef8c4757

  • SHA512

    2a4c07302ac4bdbffff4f73ba30f4610d79285dd9645f87eec21a523f41cf7caa2d1291141810b2bbdc76335cf9f001d2e37c5f89fa9dd4af5140cbbaceb27f2

  • SSDEEP

    768:DMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lcYW9Nhcv:YNW71rcYDAWeotvXlB

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0aac45dc375dd21bec6f697abedb42b6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections