Overview

overview

10

Static

static

10

JaffaCakes...f3.exe

windows7-x64

10

JaffaCakes...f3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_fad27522f88d833604c58cda87c32bf3

  • Size

    33KB

  • MD5

    fad27522f88d833604c58cda87c32bf3

  • SHA1

    7bf839cd135125c8fee42fac5707af1ce2b08f23

  • SHA256

    2e1e4efc1bf6491f49d159a3814e6b6b65b07fb6c890d6125aeef17c9744f58b

  • SHA512

    bfbdd4d8fe53bf1601e7a4b63ff2f353a539c22e71e63b70b372f578045ba44e7d32b58c603fb4b86bb0a4d59b4ba295893905da947563c2c62e0d12bbb84d22

  • SSDEEP

    768:wMuijtHf5g7/IIG3bGcYDBSvFIWuePQDGEsgRMdd5rZHUwbtLNO:5NW71rcYDAWeoDrsEud5rZ0w5N

Score
10/10
upxxtremerat

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
    xtremerat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_fad27522f88d833604c58cda87c32bf3
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections