Extracted

• • Target

    JaffaCakes118_659293c4c63e5e137b7ad753e718810c

  • Size

    33KB

  • MD5

    659293c4c63e5e137b7ad753e718810c

  • SHA1

    413e69c5d0fb7f9c1489ad24fa6c092fe666516b

  • SHA256

    8e077426126ea4cdc703109294b2a91158f32d291db8936ca42556366065b887

  • SHA512

    927670565f172966fd625db839820649127150d280c63a2d69f88ca3fa340b1fd1218bd3eb21dd04c7abb030e32358c740f77ffcea4966d2a4540f94ba9f9a91

  • SSDEEP

    768:1MuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lEWZe5afYgsa:+NW71rcYDAWeotvXlE4waQ

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2