Overview

overview

10

Static

static

10

213ddd4d59...18.exe

windows7-x64

10

213ddd4d59...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    213ddd4d599d30f1d0d2283af2bda270_JaffaCakes118

  • Size

    72KB

  • MD5

    213ddd4d599d30f1d0d2283af2bda270

  • SHA1

    b4bd9385df0551a1fa795506763d1a2ad32e7595

  • SHA256

    98a406bdbe6aff195107994b5cc5e05bfebd8549f8bcf490d94268539dde345a

  • SHA512

    d03c26650bc80c181f989b1423922f763c61c2e69eb921ed506c8985fc57b1f0595c07268167c2a8c285b2b014ad85b3ebb5e3fb1748d1dadb743cb6abb611cd

  • SSDEEP

    1536:IF7aq0sNgfJqI7VoH2T/UBZnvyrMb+KR0Nc8QsJq39:6+q03RqI7mWT/AZnvyre0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.50.60.69:4321

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 213ddd4d599d30f1d0d2283af2bda270_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections