Overview

overview

10

Static

static

10

0db0624be8...18.exe

windows7-x64

10

0db0624be8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0db0624be8dd3c3d79be14262e161f9a_JaffaCakes118

  • Size

    472KB

  • MD5

    0db0624be8dd3c3d79be14262e161f9a

  • SHA1

    0d84c2d20b80f2e24cb277754defca01dc237139

  • SHA256

    8032b45d2c254e3ee8b45d0742330d48157efacba99189c0fdb7094bc100f280

  • SHA512

    c888370e7f5355569e5bf74618bdfa840437148601088c911b472ed56b95670cabdfbf377eff537e49954cfd8ee762a0e81371df4a4e324a7ffca321ac8e36e9

  • SSDEEP

    12288:U1XOdNE5dNb2HaPfUX0TtbfEPuLxvuwbj0q692:DdNyb2HiUXOtbOuLxb68

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.45:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0db0624be8dd3c3d79be14262e161f9a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    74638b0911b0c9268aae1edee5a60a9f


    Headers

    Imports

    Sections