General

  • Target

    9cbf7d6ce89ac955fb7ef854ca20fb0d_JaffaCakes118

  • Size

    230KB

  • MD5

    9cbf7d6ce89ac955fb7ef854ca20fb0d

  • SHA1

    16e451b139f79fc0fc95e2989184cbbc6544a8d4

  • SHA256

    a0ee4938177c3f303130b68bcaca9a7d6b865c93b4fe794d0e0e96d13ebff3ce

  • SHA512

    a2b907a9e058d747444c25b67bade177a667d37a2ee2dec28bd6865379ecb876a94f5cde266386fc28ae2ca076dd945bbfc6071c0dcb6575c8dc23a3047670a7

  • SSDEEP

    6144:RBLmqajezILl7bnYsIH95oScXrvLqDDvMo:1iezAfYvcXrmXM

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9cbf7d6ce89ac955fb7ef854ca20fb0d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections