General

  • Target

    c8f80fe1bd34813da4785f87c9f3175f_JaffaCakes118

  • Size

    227KB

  • MD5

    c8f80fe1bd34813da4785f87c9f3175f

  • SHA1

    2c628cea33512818a9289dc25767b762b4c4a97d

  • SHA256

    58380b2b17bfda621078a571c4820b71b76c673dfacab7bd604ea3f41402ba84

  • SHA512

    2abcc31b5052b8899a6421e6ef6e431aa1e391358e7f530b60ebcef436be45f3c0acbbc8e418db963553887ecfd54b6f18a2a17ddbec06087a6f513555a9fe6a

  • SSDEEP

    3072:hAe+3aJpgW0TBuA/JFONMVU2U4FzC+CzBl1jXHcY/JFONMd:GB+pgXXJFOSVU2ZiN/8MJFOSd

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c8f80fe1bd34813da4785f87c9f3175f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Headers

    Imports

    Sections

  • .data
  • .jmue
  • .rdata
  • .rsrc/1026/version.txt
  • .rsrc/1028/version.txt
  • .rsrc/1029/version.txt
  • .rsrc/1030/version.txt
  • .rsrc/1031/version.txt
  • .rsrc/1032/version.txt
  • .rsrc/1033/DIALOG/103
  • .rsrc/1033/DIALOG/105
  • .rsrc/1033/DIALOG/106
  • .rsrc/1033/DIALOG/107
  • .rsrc/1033/DIALOG/111
  • .rsrc/1033/DIALOG/203
  • .rsrc/1033/DIALOG/205
  • .rsrc/1033/DIALOG/206
  • .rsrc/1033/DIALOG/207
  • .rsrc/1033/DIALOG/211
  • .rsrc/1033/DIALOG/303
  • .rsrc/1033/DIALOG/305
  • .rsrc/1033/DIALOG/306
  • .rsrc/1033/DIALOG/307
  • .rsrc/1033/DIALOG/311
  • .rsrc/1033/DIALOG/403
  • .rsrc/1033/DIALOG/405
  • .rsrc/1033/DIALOG/406
  • .rsrc/1033/DIALOG/407
  • .rsrc/1033/DIALOG/411
  • .rsrc/1033/DIALOG/503
  • .rsrc/1033/DIALOG/505
  • .rsrc/1033/DIALOG/506
  • .rsrc/1033/DIALOG/507
  • .rsrc/1033/DIALOG/511
  • .rsrc/1033/GROUP_ICON/103
  • .rsrc/1033/ICON/1
    .png
  • .rsrc/1033/ICON/2.ico
  • .rsrc/1033/ICON/3.ico
  • .rsrc/1033/ICON/4.ico
  • .rsrc/1033/ICON/5.ico
  • .rsrc/1033/ICON/6.ico
  • .rsrc/1033/ICON/7.ico
  • .rsrc/1033/ICON/8.ico
  • .rsrc/1033/ICON/9.ico
  • .rsrc/1033/MANIFEST/1
    .xml
  • .rsrc/1033/version.txt
  • .rsrc/1034/version.txt
  • .rsrc/1035/version.txt
  • .rsrc/1036/version.txt
  • .rsrc/1038/version.txt
  • .rsrc/1040/version.txt
  • .rsrc/1041/version.txt
  • .rsrc/1042/version.txt
  • .rsrc/1043/version.txt
  • .rsrc/1044/version.txt
  • .rsrc/1045/version.txt
  • .rsrc/1046/version.txt
  • .rsrc/1048/version.txt
  • .rsrc/1049/version.txt
  • .rsrc/1053/version.txt
  • .rsrc/1054/version.txt
  • .rsrc/1055/version.txt
  • .rsrc/1058/version.txt
  • .rsrc/2052/version.txt
  • .rsrc/2070/version.txt
  • .text