Overview

overview

10

Static

static

10

JaffaCakes...bc.exe

windows7-x64

10

JaffaCakes...bc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_798a3c4255ff308779b2b0326a2efebc

  • Size

    21KB

  • MD5

    798a3c4255ff308779b2b0326a2efebc

  • SHA1

    a7df47fe49ef2fd41a691422b88d22d4c67fcf35

  • SHA256

    baa0f4aec9ba951e19ab8889faf8cd1660d68fb41bb557a96f0ee98907d66deb

  • SHA512

    f91a255aacaadb538ecb291dff4852c2c19c39d93b5c0f9516af489b26331cb727b03be92d39fb18a4d1eb197dbce2a772e00e90cf1de8619b96c133f0f478f6

  • SSDEEP

    384:3IdmF+TH95xJMu/0PlxjV8BINhuLJ37tMOpuqqz3KK7eIVmi7gd/zCFscLpLR:3IsF8HdbKjV8BX7Vy6K7eIVTUd/Isy

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_798a3c4255ff308779b2b0326a2efebc
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections