General

  • Target

    JaffaCakes118_662d62b2629a5495e9dcc647bdef9fe0

  • Size

    19KB

  • MD5

    662d62b2629a5495e9dcc647bdef9fe0

  • SHA1

    37173aa125d48e3fd1deb0296a5202eb3e277155

  • SHA256

    71814dfbeb959f3ecfe2a7104ebca3b4ec85dbfa53b9bff6c0b702cc5067adfc

  • SHA512

    35165c83ce5bc6bebd83ba2a4528a66af20ecd746c525c6313e8189d18157b19f6fe19c71ae7eee909389ddbd48c09f7fe65881e58308f1ba1efc2bf4defe094

  • SSDEEP

    384:9HKZfuH87GowDqGoMwevqxP6k6zIDwPVBSQyQdozhYDqNdoc7R:IZfuHUvwDKP6kMp17dShNaW

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_662d62b2629a5495e9dcc647bdef9fe0
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections