Analysis
-
max time kernel
139s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
23-06-2024 08:46
Behavioral task
behavioral1
Sample
05c12a2db7e2f37660e481e0bf0f957b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05c12a2db7e2f37660e481e0bf0f957b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
05c12a2db7e2f37660e481e0bf0f957b_JaffaCakes118.exe
-
Size
72KB
-
MD5
05c12a2db7e2f37660e481e0bf0f957b
-
SHA1
7d733691ea0cbe083a9c13af595a32ac516463d4
-
SHA256
e1eee24c316fea187d47f1fe9c6eea7dcc121f2f239bf12c35abe6faa90645ca
-
SHA512
12676d224e8f36fa02297761afaf4f255d15864ad8b45b6484c866f6b1610cb30e3fd465c48563be1b8c3c7c80270125e83084c075da80b495eada9439c4212b
-
SSDEEP
1536:IaPcrB9xFqP7m85o1G3dNohMhRjgAMb+KR0Nc8QsJq39:qB9xcn5okNiCgAe0Nc8QsC9
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
192.168.30.153:443
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.