Extracted

• • Target

    JaffaCakes118_a192456cfe9e6a4dfb2749bbc25a6f3a

  • Size

    826KB

  • MD5

    a192456cfe9e6a4dfb2749bbc25a6f3a

  • SHA1

    1d1e0bfbe4fbb19c8f515ab940e249c1370c4d69

  • SHA256

    4e06ed1b6a74522bdce80911f53bfe2444408bfa0bce535c011a1f9bbfa5fe08

  • SHA512

    583b2a6f505343c0ce6193693c0f9c3d86a3142c93fa92c9a2892d3d6012f88c1944e6a3afe77ae28c620692cbe94038fdccb56e45520d307b49ab97f68a17d6

  • SSDEEP

    24576:9vwQMN2K3yWds0JkKyVm075lymxOOLhya98+BP6tCqLRYC:FlhadsL4075wmTttOCqv

  Score

  10^/10

  xtremeratdiscoverypersistenceratspywareupx

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Xtremerat family

    xtremerat

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1