General

  • Target

    JaffaCakes118_a8b85f4be09f814aefee58128c23ccc5

  • Size

    36KB

  • MD5

    a8b85f4be09f814aefee58128c23ccc5

  • SHA1

    fe9dbc6bb0a225f4c6f5d231aafc7b2eb6a3c2e4

  • SHA256

    da708f36037a25f183190995bdf48d5d9498e7ec732de39e3d0506f68536699a

  • SHA512

    0c42cac4b358f614f6ca6851ae6a173e215a2a99cfd0152149878acb8da34cbfc74b369e8e6a3cb06e237501f4739d905f8881daedbe0aefc4b8ff596d641495

  • SSDEEP

    768:3suijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jCh7+bzZdkXneRgbCtsDqE:8NW70x6ALBwz7+BdkXneRgbCtsDqE

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_a8b85f4be09f814aefee58128c23ccc5
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections