Overview

overview

10

Static

static

10

21fb1a0552...18.exe

windows7-x64

10

21fb1a0552...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    21fb1a0552f1b70b763ab4d8ac79b38f_JaffaCakes118

  • Size

    72KB

  • MD5

    21fb1a0552f1b70b763ab4d8ac79b38f

  • SHA1

    56de87c2892588f34177541058aaa4ca54675c16

  • SHA256

    aaa235339efb03193bf11ffe20588ce26e8111ecca5bd668a66df6aa69e570d9

  • SHA512

    49121da791751c942870038a1186771859443bf9c28b30c3ac4eb0a7cfd9f8242bb68fb1deb4bf1b9e1458e74d9755da568a198264ae080a37cfffc0158f04ab

  • SSDEEP

    1536:IZIM6lZ4uM/+hEnY76XGFlf3zTzuywMb+KR0Nc8QsJq39:GZ+aY762FlfzTzuywe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

37.106.35.62:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 21fb1a0552f1b70b763ab4d8ac79b38f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections