General

  • Target

    JaffaCakes118_adbd5bcbab544a5094ed42aad5afc0f4

  • Size

    21KB

  • MD5

    adbd5bcbab544a5094ed42aad5afc0f4

  • SHA1

    ccebd8c3fb2e288efda0becb46b000b956bf4f62

  • SHA256

    eb441531940d93e21294e00508f64209d3d8af24a35310c34c91e436ff61b920

  • SHA512

    b1c25084569e30007329e5ecc25586cdb6a2bd75237d3b296de19f094d53489a9ba460fda65fa7ce25017f4964d89c9aa73327a8990bf74d86def55623ae9d39

  • SSDEEP

    384:8IdmF+TH95xJMu/0PlxjV8BINhuLJ37tMOpuqqz3KK7eIVmbYXb1gorR/spLR:8IsF8HdbKjV8BX7Vy6K7eIVYYL1JrRk

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_adbd5bcbab544a5094ed42aad5afc0f4
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections