xtremerat | JaffaCakes118_76afdb3d2ed022e516433514caae7d0c | Triage

Sharing

General

Target

JaffaCakes118_76afdb3d2ed022e516433514caae7d0c
Size

40KB
MD5

76afdb3d2ed022e516433514caae7d0c
SHA1

875e1c32358ce51c7097eda07d5a33652c81e88a
SHA256

a37c383e2e761110ff163cd21a49f8e38a51421cffbd348e6e594ccb5f02d24c
SHA512

667784bde89d0ab1e0bbfc7f6b8159e50ab678d1fe0fed32c970c095c34a3626f6ad2124c0e06322c0504ee493f5b2ff4ef0ae017556f89186a3c2f1db654ba1
SSDEEP

768:sE9hghdN12Ozhiow2Gkm6Oco/JBzNBwIldLzo2:su+zMOlw2GkmCofBldPo2

Score

10^/10

xtremerat

Malware Config

Signatures

Xtremerat family
xtremerat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_76afdb3d2ed022e516433514caae7d0c

Files

JaffaCakes118_76afdb3d2ed022e516433514caae7d0c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ