General

  • Target

    8774de5971f801c018c68d9c4f40c6b8_JaffaCakes118

  • Size

    33KB

  • MD5

    8774de5971f801c018c68d9c4f40c6b8

  • SHA1

    605249ce469d56ac5a0be06bbdf46f79375ecd70

  • SHA256

    131b3e9fade5caa6fcd3e6fffe66c6bbbb1c7b7043b6e89bd5f822c90388f572

  • SHA512

    11da4150cba9f2d1e6839e04e17af0e55c76bee120134559a23f165dca23414a4e52eee667cf4eb75aa9526330bbeb1ee54e75ee6ae435cddaf512e7ae8eeffa

  • SSDEEP

    768:62HijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lTtziNoEN:x6W71rcYDAWeotvXlh2Nv

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8774de5971f801c018c68d9c4f40c6b8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections