Overview

overview

10

Static

static

10

fe689f470a...18.exe

windows7-x64

10

fe689f470a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe689f470ae3177a2f930e5522f916ba_JaffaCakes118

  • Size

    1.7MB

  • MD5

    fe689f470ae3177a2f930e5522f916ba

  • SHA1

    34f3d685fd737ad2dbf014778bae7fa3dd295225

  • SHA256

    d085afb656f664c6492355cc6bf3e6cf6f76420fbfeac21009baec2d19e987b1

  • SHA512

    d3406b1715ff82dbfeff953126903cb529bf4dee9e3f401d5fd85697d87adbbfe56feb0360a1fc81592f17ea10906f78c2dc11315534f955cb939f4fff9254a5

  • SSDEEP

    24576:e4fXSohkQN+CeoJ2Gag+XxSTP0FscwM+n1Y1piSsGPYzIbC/liB0olLXU600phhi:XfXSoCQNeh/gIxST3pTY+SsG/tlLfhRo

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.89.128:6732

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe689f470ae3177a2f930e5522f916ba_JaffaCakes118
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections