Overview

overview

10

Static

static

10

0fe823e06d...18.exe

windows7-x64

10

0fe823e06d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fe823e06dd23c694ae002263ad1c387_JaffaCakes118

  • Size

    333KB

  • MD5

    0fe823e06dd23c694ae002263ad1c387

  • SHA1

    e1f0de028453f4c5ed57786e335115fe22a9a2c6

  • SHA256

    443bf44a7c9da54bc29b0ba6352b3ae5d3cb53dee2539139017668da65095e78

  • SHA512

    6d8daf6c67c80deb0ae85259ea669733450d2bef456506078e80ba1ef971eb50334398338249272850420e117e0656a67dcf224dff79e8bc93c26e7568be6165

  • SSDEEP

    6144:g8tCK2ScFYSm+16AiTOfbhy7Ro6udKM83ho0hy67c2S4:XSFYm1IM2o6rxxhy6Q4

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.109:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fe823e06dd23c694ae002263ad1c387_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections