Extracted

• • Target

    JaffaCakes118_61a9137bcb3b69c37c7d55ab0afdb948

  • Size

    135KB

  • MD5

    61a9137bcb3b69c37c7d55ab0afdb948

  • SHA1

    9e4c4da1342cfb16221cdc94aea27d44736650e1

  • SHA256

    54d9609bb8c5f2bfe3ccf4209970ecd6c68f15b4e07d44293fc66f67af47bac5

  • SHA512

    a784d4ad57e04d63fe93dd7c4d27559d79780260b34941334f8ee69f91c4958ceaa466873cd584bbe5e807ea9b04365e33ccdb2ee0fa22675da84fa7997c291c

  • SSDEEP

    3072:P//IqvgT+R6M6GUwqgCnb3XiRo5h9kGJ4ux1GAYoX190zT9:P//35R6M3USCnb3XiK5Pk7ssAY1

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2