General

  • Target

    095096ec6c16307b0973f4cbf79af54a_JaffaCakes118

  • Size

    435KB

  • MD5

    095096ec6c16307b0973f4cbf79af54a

  • SHA1

    0501db538759fbb0f34b0302188dcc07a421dec0

  • SHA256

    0c7f7b37374bbc49bef2c3c2af4891f74ea610085e30e97d1d2aab16310ca143

  • SHA512

    974c021e99ff40a7bbbc90d9e9304f79033b158e56f8ce401001625452bc8af74affb9ea9f8201ae2de59028b336f2e647b30b47e658af0e52487f45fbda300c

  • SSDEEP

    6144:Q6W5IJreWWanCkdMogx4CKjFOb49upR1RyTYDRH+mP/EwA5wVPSbJLclSbK+9yb:QxIJreLtKBmr1RyoequwVPSb8b

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • 095096ec6c16307b0973f4cbf79af54a_JaffaCakes118
    .zip
  • SLAE-Code-Repository-master/Assignment 1/bind_tcp.cpp
  • SLAE-Code-Repository-master/Assignment 1/bind_tcp_shellcode.nasm
  • SLAE-Code-Repository-master/Assignment 1/compile.sh
    .sh linux
  • SLAE-Code-Repository-master/Assignment 1/converter.py
  • SLAE-Code-Repository-master/Assignment 1/gen_bind_tcp_shellcode.py
  • SLAE-Code-Repository-master/Assignment 1/shellcode_loader
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 1/shellcode_loader.cpp
  • SLAE-Code-Repository-master/Assignment 2/compile.sh
    .sh linux
  • SLAE-Code-Repository-master/Assignment 2/converter.py
  • SLAE-Code-Repository-master/Assignment 2/gen_reverse_tcp_shellcode.py
  • SLAE-Code-Repository-master/Assignment 2/reverse_tcp.cpp
  • SLAE-Code-Repository-master/Assignment 2/reverse_tcp_shellcode.nasm
  • SLAE-Code-Repository-master/Assignment 2/shellcode_loader
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 2/shellcode_loader.cpp
  • SLAE-Code-Repository-master/Assignment 3/compile.sh
    .sh linux
  • SLAE-Code-Repository-master/Assignment 3/converter.py
  • SLAE-Code-Repository-master/Assignment 3/egg-hunter_shellcode.nasm
  • SLAE-Code-Repository-master/Assignment 3/egghunt-shellcode.pdf
    .pdf
    • http://andeveryoneelseatnologin.org

    • http://hick.org

    • http://undocumented.ntinternals.net/

    • http://www.microsoft.com/msdownload/platformsdk/sdkupdate

    • http://www.microsoft.com/msdownload/platformsdk/sdkupdate;ac-cessed09/05/2004.2NTInternals.net.TheUndocumentedFunctions.http://undocumented.ntinternals.net/;accessedApr03,2004.3OSVDB,MicrosoftIEObjectTypePropertyOver

    • http://www.nologin.org

    • http://www.osvdb.org/displayvuln.php?osvdb_id=2967

    • http://www.osvdb.org/displayvuln.php?osvdb_id=2967;accessed09/04/2004.4OSVDB,SubversionDateParsingOver

    • http://www.osvdb.org/displayvuln.php?osvdb_id=6301

    • Show all
  • SLAE-Code-Repository-master/Assignment 3/staged_shellcode_loader
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 3/staged_shellcode_loader.cpp
  • SLAE-Code-Repository-master/Assignment 4/compile.sh
    .sh linux
  • SLAE-Code-Repository-master/Assignment 4/converter.py
  • SLAE-Code-Repository-master/Assignment 4/encoder_proto.py
  • SLAE-Code-Repository-master/Assignment 4/rot13_decoder_stub_shellcode.nasm
  • SLAE-Code-Repository-master/Assignment 4/shellcode_encoder.py
  • SLAE-Code-Repository-master/Assignment 4/shellcode_loader
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 4/shellcode_loader.cpp
  • SLAE-Code-Repository-master/Assignment 5/linux-x86-bindshell.dot
  • SLAE-Code-Repository-master/Assignment 5/linux-x86-bindshell.png
    .png
  • SLAE-Code-Repository-master/Assignment 5/linux-x86-exec.dot
  • SLAE-Code-Repository-master/Assignment 5/linux-x86-exec.png
    .png
  • SLAE-Code-Repository-master/Assignment 5/linux-x86-reverseshell.dot
  • SLAE-Code-Repository-master/Assignment 5/linux-x86-reverseshell.png
    .png
  • SLAE-Code-Repository-master/Assignment 6/1st Shellcode/compile.sh
    .sh linux
  • SLAE-Code-Repository-master/Assignment 6/1st Shellcode/converter.py
  • SLAE-Code-Repository-master/Assignment 6/1st Shellcode/execve_bin_sh_polymorphic
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 6/1st Shellcode/execve_bin_sh_polymorphic.nasm
  • SLAE-Code-Repository-master/Assignment 6/1st Shellcode/execve_bin_sh_polymorphic.o
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 6/1st Shellcode/shellcode_loader
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 6/2nd Shellcode/compile.sh
    .sh linux
  • SLAE-Code-Repository-master/Assignment 6/2nd Shellcode/converter.py
  • SLAE-Code-Repository-master/Assignment 6/2nd Shellcode/mkdir_polymorphic
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 6/2nd Shellcode/mkdir_polymorphic.nasm
  • SLAE-Code-Repository-master/Assignment 6/2nd Shellcode/mkdir_polymorphic.o
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 6/2nd Shellcode/shellcode_loader
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 6/3rd Shellcode/compile.sh
    .sh linux
  • SLAE-Code-Repository-master/Assignment 6/3rd Shellcode/converter.py
  • SLAE-Code-Repository-master/Assignment 6/3rd Shellcode/reboot_polymorphic
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 6/3rd Shellcode/reboot_polymorphic.nasm
  • SLAE-Code-Repository-master/Assignment 6/3rd Shellcode/reboot_polymorphic.o
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 6/3rd Shellcode/shellcode_loader
    .elf linux x86
  • SLAE-Code-Repository-master/Assignment 7/shellcode_crypter.py
  • SLAE-Code-Repository-master/Assignment 7/shellcode_decrypter.py
  • SLAE-Code-Repository-master/LICENSE
  • SLAE-Code-Repository-master/README.md