General

  • Target

    JaffaCakes118_ac598f4766d51e5ec9cc613729194db8

  • Size

    33KB

  • MD5

    ac598f4766d51e5ec9cc613729194db8

  • SHA1

    6f7dccbdf9606a1b80bd9f878accc6393681a0bc

  • SHA256

    ffad276a2f9b4babdd35334e2217f2c25adbc5cb3194cb8486220ad1c979c0a2

  • SHA512

    08a01073b1d5bab6430f12fcf782891eaee6401904c4d3a4e113d891fc93614089970b859995b083675b150509d5066e1aa9f390917aa5a8ab2f7ac7066ef745

  • SSDEEP

    768:6yHijtHf5g7/IIG3bGcYDBSvFIWuePQtv66lTtziNoEN:t6W71rcYDAWeotvXlh2Nv

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_ac598f4766d51e5ec9cc613729194db8
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections