Overview

overview

10

Static

static

10

241c9f50fa...18.exe

windows7-x64

10

241c9f50fa...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    241c9f50fa313baa257fc4bc5bbaedc5_JaffaCakes118

  • Size

    72KB

  • MD5

    241c9f50fa313baa257fc4bc5bbaedc5

  • SHA1

    d782461934999c80ea561d138d8647d0413fee62

  • SHA256

    d123cb402f5f9112ca9cc85550a42ae3fb8df8569b4a2ae42370ed07400ff8af

  • SHA512

    e231b06399511acf5540df62c3748a5556a076577191503d9d2e67734efadcd9221f4363abe11f4b6ca3a348d6b57b025dcd8873bbea249cd3617fc1774f5462

  • SSDEEP

    1536:IDnio/VzA6YHr4AHD0+NQTsdjl4LDH4CZY1Mb+KR0Nc8QsJq39:DcO6YHrzHQ+6QdshSe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.211.55.6:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 241c9f50fa313baa257fc4bc5bbaedc5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections