General

  • Target

    JaffaCakes118_6a236dd5a1104e5b33b6ed9e533ceb6e

  • Size

    30KB

  • MD5

    6a236dd5a1104e5b33b6ed9e533ceb6e

  • SHA1

    a2e9cc65a8ceb0303fb228d6cba4119dc5fb73ce

  • SHA256

    32fefd5972714e8f1035b1a24a59b482ec9ef960fc51ebe51e9eba5311ff69e8

  • SHA512

    ffa1ae01dd500838075a44e7d288d652bf4aee744030e5b224391432a24728084b9f1f95f5722b9776c8e341e0f1ba329d2b3b77b2fa8d963aea562d394b9b25

  • SSDEEP

    768:64l/50VTed7NY+K3LeJPd2lVMG7Rxrl4U2sJD7R55lsNVMn:MTyu7YOMqRvBD7RVsMn

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6a236dd5a1104e5b33b6ed9e533ceb6e
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections