Overview

overview

10

Static

static

10

09acd1b801...18.exe

windows7-x64

10

09acd1b801...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    09acd1b8019a5775266a0d0b431d3f38_JaffaCakes118

  • Size

    92KB

  • MD5

    09acd1b8019a5775266a0d0b431d3f38

  • SHA1

    f9bc4e1cdd723221d97480bb9f2c4b9f468e80e6

  • SHA256

    940d3e4f7c113f7b07d4746c28c8c69b4cd0e60ebb13cc4b0043b2b61cadf80a

  • SHA512

    a474a1abdc4d43209e0135e66be6b138e09d30ef618f342457f2ce91834aed9634a5e79cb4970b36266de0c3f9ddd3a34a1c1790378e81404ccdcee7f0d14348

  • SSDEEP

    1536:ksJpo57jKj0vlFoT/o/2JCos0pwWkGWxATSmuLpLtdce3aa0oIRaHc6n:XwMGoTQ/2JC0pQAe7ce3axow+Tn

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.5:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 09acd1b8019a5775266a0d0b431d3f38_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d1c393fa6d32059b12042942bba53193


    Headers

    Imports

    Sections