Overview

overview

10

Static

static

10

f843611e46...18.exe

windows7-x64

1

f843611e46...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f843611e46842710885c498609cd616b_JaffaCakes118

  • Size

    72KB

  • MD5

    f843611e46842710885c498609cd616b

  • SHA1

    3225169ab9891a589c7a8dfa6bec7a937c156dd6

  • SHA256

    e434ac1d6bbdcd99a6cc78238232b6914a9996222af4300eaa71c8820e404906

  • SHA512

    a9d5741c7d3a115e0f62a7b5ecc528690052f7ff8d463a46824cf041f172de086d4737f8cdddb2862aafed2f776cb3adcdf5a38dac9e5aff9a39ad4ee1810807

  • SSDEEP

    1536:IOC5lhsUx4BLnlSnh2TKVMMb+KR0Nc8QsJq39:NCbhbiBrloh2T3e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

188.50.170.12:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f843611e46842710885c498609cd616b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    89cc6fbf3a29fad43db29e5414592f70


    Headers

    Imports

    Sections