General

  • Target

    JaffaCakes118_bab1656920852a63f972493c7ef800c7

  • Size

    33KB

  • MD5

    bab1656920852a63f972493c7ef800c7

  • SHA1

    abeb5197dd04b25cf8204e37f9bf0b239afb1f9b

  • SHA256

    46a59687a181061a0b64a9f7361bbac78cd4c346420948033addbd601472e170

  • SHA512

    7f56101942dd756d3af73e8d68647f3002b98e2e2c59fb4bb5ba325650a3b06b516cf2253cf5df3fae0a6356b088170f74ca00cfb789810cc4da40943d99c1e6

  • SSDEEP

    768:SMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lj/txMpfYgsS:PNW71rcYDAWeotvXljFKQ

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_bab1656920852a63f972493c7ef800c7
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections