Overview

overview

10

Static

static

10

3c3046f640...18.exe

windows7-x64

10

3c3046f640...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c3046f640f7825c720849aaa809c963_JaffaCakes118

  • Size

    3.6MB

  • MD5

    3c3046f640f7825c720849aaa809c963

  • SHA1

    61ae00ec8041de7826deceb176c495ab23392efb

  • SHA256

    3993aa1a1cf9ba37316db59a6ef67b15ef0f49fcd79cf2420989b9e4a19ffc2a

  • SHA512

    64fca2287d36195c66e11c62292d094ecf7374bcaf931d04aea5a388f7f67d5588bae14a79107e61d660e745a17d577d06a69c367408ac48c4a789317d2b2470

  • SSDEEP

    98304:r1HRHgwXrMeyKVNrb6VryiHiJ+9fCU/3PLg:r1HvrZ9Vlfq1pN3

Score
10/10
upxgluptebametasploit

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Signatures

  • Glupteba family
    glupteba
  • Glupteba payload 1 IoCs
  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c3046f640f7825c720849aaa809c963_JaffaCakes118
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections