General

  • Target

    JaffaCakes118_b54f1131857634b6f1e992d80776ccd0

  • Size

    112KB

  • MD5

    b54f1131857634b6f1e992d80776ccd0

  • SHA1

    f314f67a1259b0524f6b0ae6e1cc21ac8a6fa08a

  • SHA256

    38e9c113bd34181d21020225f60b713ae16f874b2ad6693d0ae2d721001b8aee

  • SHA512

    fb6435f1f5364b4fc2a6aace7d795a4784cbe731cfbf43ea52a23b3d4780087e07056c2416c0e8cdb868f19444a4c6a63b66a21e238e62662c5c135b274a4674

  • SSDEEP

    3072:3IQ0BQ9K1/ll+rpySX6WJgFRRs1h9uT7fcYYAHLt7fn:MBQ9KrBSqDRCLYlHLh

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_b54f1131857634b6f1e992d80776ccd0
    .rar
  • me.jpg.jpg.jpg.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections