Overview

overview

10

Static

static

10

24192f37c3...18.exe

windows7-x64

10

24192f37c3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24192f37c33193d5dee06b749cec9fea_JaffaCakes118

  • Size

    72KB

  • MD5

    24192f37c33193d5dee06b749cec9fea

  • SHA1

    1bad849bedf26c45796fe11b72c66a0b00056f5a

  • SHA256

    b3c67a1f5476c114498554ad015cd33e5af755e949c3cc44d1d57eb2c1f94425

  • SHA512

    4ab32de1415ca50a3e723c5246f0ae515e57891954f6a2909dbd1417c62982c9f0d37b74aef82128f1cbdb2c31b478490c98cff3d5dbf63005815c76a9f01b17

  • SSDEEP

    1536:IRcFpa2e9WlvGM3fmZNHMIt6Mb+KR0Nc8QsJq39:ccFA21ldgtt6e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.254.5:123

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24192f37c33193d5dee06b749cec9fea_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections