Overview

overview

10

Static

static

10

ed1169c6e1...18.exe

windows7-x64

10

ed1169c6e1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed1169c6e175e87a172b2d53b55b0940_JaffaCakes118

  • Size

    72KB

  • MD5

    ed1169c6e175e87a172b2d53b55b0940

  • SHA1

    c9d15a5af342debc05af88077f9322c2467ced58

  • SHA256

    e409865acd25c5c26362b011c7884e1203de23f43af7051be56d691f9905b946

  • SHA512

    1ec02248bf11abc4f10ce54b10170b755de22cae46e86ed72a368a1b5930e737708e7989370342ca069ca57000d0d37e2834338da70b96ffb56e505c863e0b40

  • SSDEEP

    1536:IUmF7kneGGJiZZbVJM981m95eMb+KR0Nc8QsJq39:ztF88kfee0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.4:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ed1169c6e175e87a172b2d53b55b0940_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections