Overview

overview

10

Static

static

10

0b9b250720...18.exe

windows7-x64

10

0b9b250720...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    0b9b250720f74e9b9d0a768a4498343a_JaffaCakes118
  • Size 72KB
  • Sample240625-a4n1javanl
  • SHA256 0ad3953873e15cd043f0ae4b50e8672318d2cd9e359411afb99b47db1281b776
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
metasploit

Malware Config

Extracted

Family

  • metasploit

Version

  • windows/shell_reverse_tcp

C2

  • 99.245.220.249:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 0b9b250720f74e9b9d0a768a4498343a_JaffaCakes118
    .exe 72KB

0b9b250720f74e9b9d0a768a4498343a_JaffaCakes118

  • IMPHASH 481f47bbb2c9c21e108d65f52b04c448
  • SHA256 0ad3953873e15cd043f0ae4b50e8672318d2cd9e359411afb99b47db1281b776
  • MD5 SHA1 SHA512 SSDEEP
windows:4windowsx86arch:x86

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
45827
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths