Overview

overview

10

Static

static

10

0f17778254...18.exe

windows7-x64

10

0f17778254...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f17778254226d9ff482a60cf000f79f_JaffaCakes118

  • Size

    72KB

  • MD5

    0f17778254226d9ff482a60cf000f79f

  • SHA1

    0e311358672f7a7d960532662699f7b8be65d727

  • SHA256

    57d308687c8344db12e831beda7df280909263bbe1105a7896676b817b1b5f63

  • SHA512

    71d50d83e775d865abefcba2cfc1762f525a42712db87a0ddb2bb284e93e597764cdd9081c13db2dd0533b19636c8785915dfc7a8e79ad7a1c7a3794bfd6eb6d

  • SSDEEP

    1536:INE20GdnjUWpWETZByxU4AC26FMb+KR0Nc8Qs:wENOnjUPoZWUMVe0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.20:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f17778254226d9ff482a60cf000f79f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections