Overview

overview

10

Static

static

10

f888abfb9b...18.exe

windows7-x64

10

f888abfb9b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f888abfb9bc6de8e5f2e9e319fea3847_JaffaCakes118

  • Size

    72KB

  • MD5

    f888abfb9bc6de8e5f2e9e319fea3847

  • SHA1

    1e013608341c33cb161c4200d5a77f5941627848

  • SHA256

    d036d9b96d629767106b922ab63c6f79f0f68b9f285007ac32e5e4cf1001e9b0

  • SHA512

    5a397116d0f8e62449c8c24701fd0dcb43a7bac4064917724991f85b7e02af78cfae5d91a61064dd49c07fb3164238701501ac574c60572416055e2fda18908a

  • SSDEEP

    1536:IMKSKM18dsblVbZzyuCc0utazCrAhZPh38Mb+KR0Nc8QsJq39:tKC8dsblVZzfCJ7zpDPSe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.8:95

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f888abfb9bc6de8e5f2e9e319fea3847_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections