Extracted

• • Target

    JaffaCakes118_bab1656920852a63f972493c7ef800c7

  • Size

    33KB

  • MD5

    bab1656920852a63f972493c7ef800c7

  • SHA1

    abeb5197dd04b25cf8204e37f9bf0b239afb1f9b

  • SHA256

    46a59687a181061a0b64a9f7361bbac78cd4c346420948033addbd601472e170

  • SHA512

    7f56101942dd756d3af73e8d68647f3002b98e2e2c59fb4bb5ba325650a3b06b516cf2253cf5df3fae0a6356b088170f74ca00cfb789810cc4da40943d99c1e6

  • SSDEEP

    768:SMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lj/txMpfYgsS:PNW71rcYDAWeotvXljFKQ

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • Downloads MZ/PE file

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2