xtremerat | JaffaCakes118_0faacaebc8a0f2d3805939e0a21d5560 | Triage

Sharing

General

Target

JaffaCakes118_0faacaebc8a0f2d3805939e0a21d5560
Size

45KB
MD5

0faacaebc8a0f2d3805939e0a21d5560
SHA1

9fad08b174d05cfc61c5c66c63c655d32d4797ea
SHA256

c925f407577f1fed2f44b968754b36040f0284c8601480d9df19e85838c82a40
SHA512

a299964d53690b2c0a11130161bbe006abdd9b25eec486ea7f1646caf349fa6b2b18868efa54495b9017750b9a5b670c446925904d6ed2641ca6bdfa4d32a4fa
SSDEEP

768:NB7+tTFH90iY6W1jPmDzKgEFQXKklzIAn38hwfegw0cRzova:zCBg31jKPEFQXKkx384rkova

Score

10^/10

xtremerat

Malware Config

Signatures

Xtremerat family
xtremerat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0faacaebc8a0f2d3805939e0a21d5560

Files

JaffaCakes118_0faacaebc8a0f2d3805939e0a21d5560
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ