Overview

overview

10

Static

static

10

48e0581941...18.exe

windows7-x64

10

48e0581941...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48e0581941cedbef9b71663b18d837fd_JaffaCakes118

  • Size

    33KB

  • MD5

    48e0581941cedbef9b71663b18d837fd

  • SHA1

    69f90d4dc0a7efd0cec54ee996edc7323360e55d

  • SHA256

    b913eac59f2d6c06564e0934929b0c74abd3d5c3c4eeed53b9097ae93db9443f

  • SHA512

    4885eccd20f031c6fdccb7937e4a0994609ca739ac5bbf0791f15568dd4cb5e50bba3c9b80212c99e8b37824bc7fd2e7663b71262b2447f0016238808a26bea6

  • SSDEEP

    768:9MuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lIPtzEpMj:WNW71rcYDAWeotvXlIVM

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48e0581941cedbef9b71663b18d837fd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections