General

  • Target

    JaffaCakes118_7fcfaf970efd248f42848f7dc4cf9283

  • Size

    33KB

  • MD5

    7fcfaf970efd248f42848f7dc4cf9283

  • SHA1

    62edf63485c84182db610bac888d4242e0fe8f24

  • SHA256

    95dd81099cca6cbe7f5b7d3b50ea8b099e4b9428b5bc57f3281e5a5d78f70b7b

  • SHA512

    e75f8a3597b7da2804aad83daf4fd6405613a593bfb01de318826ff88e3fd898990f2b3a3d6c4043c15793073153902d0d364145cfb10f09c197722934429498

  • SSDEEP

    768:NMuijtHf5g7/IIG3bGcYPBSvFIWuePQtv66l5tz7KZdtJ7Or:mNW71rcYPAWeotvXl/YdW

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_7fcfaf970efd248f42848f7dc4cf9283
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections