General

  • Target

    10ca11908965499e697c9b647629f4be_JaffaCakes118

  • Size

    33KB

  • MD5

    10ca11908965499e697c9b647629f4be

  • SHA1

    b7ba8ecc312797c7dd8b919fa05074a72e832346

  • SHA256

    d940cdf9a990092a28be71d7bff5129afe7b3031613a5ad28d8612e5c1772e9d

  • SHA512

    49dba21a7dec4cc3d225daeef78987b992eaa06fe69e5ee49b063827bce6ad6ae7e01ed483806c5b45214014e8e54cba40cfc8e4c4bbfb6af09c0ea41b4c1239

  • SSDEEP

    768:KMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lH7tVDI:3NW71rcYDAWeotvXlHpV

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 10ca11908965499e697c9b647629f4be_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections