General

  • Target

    JaffaCakes118_a1bc46093609c3c2874ec43ad13e24e2

  • Size

    19KB

  • MD5

    a1bc46093609c3c2874ec43ad13e24e2

  • SHA1

    01f1b430ab08f7127d0bb16e115d7049cb0dff64

  • SHA256

    440523e49de8e740beb5610a8a7df3e7a13105299974842972d0eca0e41a18ab

  • SHA512

    a5f19d661f8e77f2e22bdce3f3db76288197a92db45a56b05dc77a16b9662883d743cafaeb2c8da904bf7031ef32d5f0100d78710f3a08e8aece14ef05480eb6

  • SSDEEP

    384:jHKZfuH87GowDqGoMwevqxP6k6zIDwPVBSfGuwgKHFzhUv7R:OZfuHUvwDKP6kMpmGuGFS

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_a1bc46093609c3c2874ec43ad13e24e2
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections