General

  • Target

    86740c25959f0a1a6cdc4e7d7b066f46_JaffaCakes118

  • Size

    33KB

  • MD5

    86740c25959f0a1a6cdc4e7d7b066f46

  • SHA1

    b266d146255a13c1e70d51373973bf1d17cae7f0

  • SHA256

    31a66b3bf61bbc8c22e89c38c57c7a61c05935be38edc1e00f75ac8eae03189d

  • SHA512

    6958510d41ad39a03a7cecb317387e0283629ac9521a9868eca1a5b999e56fecb35d3fe2137c393b1b27c3751b9c9d7889a33bef6674bd68fd57e1f1946f8b8b

  • SSDEEP

    768:UMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l2tz7FS9Vhd0tj:9NW71rcYDAWeotvXlcqhS

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 86740c25959f0a1a6cdc4e7d7b066f46_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections