Overview

overview

10

Static

static

10

0f1b5cf5f5...18.exe

windows7-x64

10

0f1b5cf5f5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f1b5cf5f518139171b27f6ba7e0484f_JaffaCakes118

  • Size

    72KB

  • MD5

    0f1b5cf5f518139171b27f6ba7e0484f

  • SHA1

    d91b5696936943278927e448ca5a81c57971eace

  • SHA256

    1ba7fcbc96073e41e0c134073898188b3e436840fd44ee086d01a45f3731f94a

  • SHA512

    cc3fa7b86798f02bc1f55a786d6582cd18196bc63a54bbc122fb8c6b154f26c28bd19b0880248ec8e8595f4ac143b0090753075f9752e4406f48944c70ebfc10

  • SSDEEP

    1536:IgRs7ULuYhyqg1YjfjslB8HNrirj8PgCIQ/HMb+KR0Nc8Qs:PR8qZ7AsIr4ojAHe0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.200:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f1b5cf5f518139171b27f6ba7e0484f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections