Overview

overview

10

Static

static

10

c5e695d62d...18.exe

windows7-x64

10

c5e695d62d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5e695d62d4c5df5e073d24900fb7e9a_JaffaCakes118

  • Size

    33KB

  • MD5

    c5e695d62d4c5df5e073d24900fb7e9a

  • SHA1

    487d9c275322156215cd27f382011a8dbfa9c043

  • SHA256

    2185131cb0f4af994331e93a7b87e2980c96233af12295cb4d482a5ddfc0cd10

  • SHA512

    dbd30f00d1cf01d1f12a16257a010a54d60ee76acfcfb8042246a4dde28b45e566200da6a344d8dd7f15e4f600b1533c130be8c88de4deba04fe7f3b155ca1b1

  • SSDEEP

    768:CMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lYtl4qSJH:/NW71rcYDAWeotvXlesJ

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c5e695d62d4c5df5e073d24900fb7e9a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections