Overview

overview

10

Static

static

10

d522c6ebfc...18.exe

windows7-x64

1

d522c6ebfc...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d522c6ebfc7f7bef4d9e49bd09e176ce_JaffaCakes118

  • Size

    102KB

  • MD5

    d522c6ebfc7f7bef4d9e49bd09e176ce

  • SHA1

    8c4bb091c48acab1ff31e5d6cbd8c0e8742e87dd

  • SHA256

    080aa4ea9daf62138460566541fe2e76614e8ed382161dbf70c436c54b0c8c23

  • SHA512

    71c596eb5e9efd9932360d052181b89928b578fd49a0a58604c22389639ef0e5d50cf37eab8afa2d6c1acf43412c96e32ec98654391db28370717d12e2f9c923

  • SSDEEP

    1536:VmiehVH6s2y1ma/XReoleWg6DoWw1xz5AUvMFMQiNS8RPhwclzwq:wiqdDNeN6DoWw1xdof8Rpxl1

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.43.163:1234

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d522c6ebfc7f7bef4d9e49bd09e176ce_JaffaCakes118
    .exe windows:4 windows x64 arch:x64

    f3cac4c1f6dc906ec53075f9c4880e38


    Headers

    Imports

    Sections