General

  • Target

    JaffaCakes118_695f9351453f1e254ee9b554a3b9f6ea

  • Size

    72KB

  • MD5

    695f9351453f1e254ee9b554a3b9f6ea

  • SHA1

    9232438de7d5cfe530676d5f9f6e37cab6ecdcc2

  • SHA256

    1bdd7c476162c7e8b30b575cf0311e7d31ad68596e9998a970d57be43cdd7484

  • SHA512

    dd7a0f51eecd43864c0860dd1240e6954dd4326cb6803cf38d236d06dc4e85e340e9b98039497f46825bc3ddeb6d5f74634448f7a84a0582bd9231fd527a7b1f

  • SSDEEP

    1536:MNW71rcYDAWeotvXluaCFWP9RNmRDXibnOqkSZZZ3rH:MNW7dEvotvXgJUPdmRDSbgUr

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_695f9351453f1e254ee9b554a3b9f6ea
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections