Overview

overview

10

Static

static

10

248851f2a7...18.exe

windows7-x64

10

248851f2a7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    248851f2a73009cde9a59980e3178328_JaffaCakes118

  • Size

    448KB

  • MD5

    248851f2a73009cde9a59980e3178328

  • SHA1

    6e295694315d27c4cbbad55c7e090ae3e51b3eaf

  • SHA256

    5bb44a84297c7fc18f055c481bb5409dfb218256bcbe700bfda744db8e36448b

  • SHA512

    ed5faa831741e0633d1dc674550f2168c3d186e51bc63dabc615245c7793e13b6d65d828f3cae634616512176053be76654e448a91c280c6e0f372eb3b8255e6

  • SSDEEP

    12288:GLXmgMb4Xd+Uh8ggdE8Ox4GoyPV4qOr1nBMIQn6:GDmgMbVujg9u4GBPVLOr1nvM6

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.25:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 248851f2a73009cde9a59980e3178328_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    bc07e7b366ac9ad23951888606f0f0fa


    Headers

    Imports

    Sections