General

  • Target

    JaffaCakes118_6bee8384a3219026188842498b5aebe0

  • Size

    21KB

  • MD5

    6bee8384a3219026188842498b5aebe0

  • SHA1

    62710b67f2ddedf4ea78ede7ee8c2958a521588a

  • SHA256

    999ce75a7dd722ebe970733d23fbedb4d4b797a4f5473959fc2fa0521515baaf

  • SHA512

    a5c2ae03abee872249f0216c91e76603bc5ca6cf3f06980492de9031238640814cb647d1720c6fef5098f5b2209959599ff6f11283e12c9b8de7d01824805a9d

  • SSDEEP

    384:IIdmF+Ti213fEF9QZd/cBr5M/gOjkaS4s/1k5YiZNlDpQ4Ub7IEDYOpLR:IIsF81fG9QveLOYTe5Yi1pQz7I0

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6bee8384a3219026188842498b5aebe0
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections