Overview

overview

10

Static

static

10

217a557be0...18.exe

windows7-x64

10

217a557be0...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    217a557be0d2deff24868c9b6e5520ed_JaffaCakes118

  • Size

    80KB

  • MD5

    217a557be0d2deff24868c9b6e5520ed

  • SHA1

    463092270b98d9cf56be2a07eabd42accbb1438b

  • SHA256

    55dd88c421de4ff97f5fd5c81ce38fc4dac339a935e8d218088f0c42e71d9ac5

  • SHA512

    a3cd544a210fced42dfbf94392f8ac4c15501951c4b40e6dee4cb4123745ce98ebade5c4076b55b142c71cbbc0cb5593bd7c865b97a47430f453e5bcabb0d1f0

  • SSDEEP

    1536:IWM+hTaqJ99/WDUGCc6dP4+ifMb+KR0Nc8QsJq3sqJg9:Y+hPJHEAdP4+ife0Nc8QsCg

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://199.204.215.60:443/FBfn

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 217a557be0d2deff24868c9b6e5520ed_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections