General

  • Target

    b2f61cb22242c461c507b489cb05e10f_JaffaCakes118

  • Size

    117KB

  • MD5

    b2f61cb22242c461c507b489cb05e10f

  • SHA1

    9f6f44a42f200ee5f0d10f8b5055c022ab11bfd1

  • SHA256

    d94e05364b8846dbf964d3b9dc0bee1b45763c0054b28ba52359cb6f18fee3d3

  • SHA512

    3652e6cc3340ede152029cbeff0fc494f7339462e2ec502052aa3937c535b9cda634345bca0c2ff44078557fbc8964dbfe77e06ca3c9bdd981bfc92d9d533394

  • SSDEEP

    3072:BNW7dEvotvXhMbnSxcORQ52VnTfOvwLISWKGpKGW6:BNW7mvIxUu5RQ5e6JSWKaM6

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b2f61cb22242c461c507b489cb05e10f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections