Overview

overview

10

Static

static

10

1677ea4c73...18.exe

windows7-x64

10

1677ea4c73...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1677ea4c733a41b6c45eaa5ac043089b_JaffaCakes118

  • Size

    72KB

  • MD5

    1677ea4c733a41b6c45eaa5ac043089b

  • SHA1

    89ec8941f2af6e62953e237b9c3c00025bff7077

  • SHA256

    24fd1fc9bd591308fd8e19191262dcb254a060e8ee60b673bad715599fcc15a3

  • SHA512

    0fac92120cacc57fb139d5ce4d313f9e056b08c588b15819c9036a4957a49eb211107efc0bb044751f40fa8160e89b8a93985338289720a828d3f149cedd0abc

  • SSDEEP

    1536:IeL1Isay5iD5ifokp1WTz98Mb+KR0Nc8Qs:nMy505inp0H98e0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.56.103:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1677ea4c733a41b6c45eaa5ac043089b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections