Overview

overview

10

Static

static

10

040f1a87e7...18.exe

windows7-x64

10

040f1a87e7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    040f1a87e7c752683e3971b05e73fe42_JaffaCakes118

  • Size

    72KB

  • MD5

    040f1a87e7c752683e3971b05e73fe42

  • SHA1

    efba2470186de9a0d0d5e3a04d4f6fbba5ed5201

  • SHA256

    55a509bf0e78fda1236e1a3849b3cf7464e25225eb5284b1a5be505761882a32

  • SHA512

    12e4de81bb71cfb5414b717b0cf2502db1025d7d40c456f31ee45cd8a28ebecffc7b2ff64ac231d846abd5fa763974491f49c71c8b3dec67c20102e6e733710c

  • SSDEEP

    1536:IhwjJClDKTfYY/+6ONdMBHkp9zXfPZkra5w7X7IREG4lMb+KR0Nc8QsJq3:xNClgfr/Md0kzXfd5w7rIUle0Nc8QsC

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

85.10.218.50:12654

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 040f1a87e7c752683e3971b05e73fe42_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections