Overview

overview

10

Static

static

10

16226711ec...18.exe

windows7-x64

1

16226711ec...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    16226711ec85c30d1a9050c3d1f9e7e4_JaffaCakes118

  • Size

    148KB

  • MD5

    16226711ec85c30d1a9050c3d1f9e7e4

  • SHA1

    6f72f5d7b3e5d05941447f85a61bdc6afa8bdaa9

  • SHA256

    de4672bb68b6b329f295cd1b95eb44c941f235b558303699c1f13c7cbc165acf

  • SHA512

    ab842c3057d2b372565676072f1ab6458ac9e7f06fca2e60ccf4ff3af1e9b883942c98cdba0fdc9319804d431214581052b30f05e3cd3e2fecbe0612140b12c7

  • SSDEEP

    768:/JB9gQW+wfKnTvDBMBVKkghuV5eI1qM8yBCw+L/i6mOy4gwogaMAsAOD:z15wSjDBwgUV5m1yIw4qeZogaMznD

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.137.250:8084

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16226711ec85c30d1a9050c3d1f9e7e4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2723042ed455a89516dedd99d22c87ce


    Headers

    Imports

    Sections