Overview

overview

10

Static

static

10

24c240810d...18.exe

windows7-x64

3

24c240810d...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    24c240810db96d07d5d14bcd0c2c52a9_JaffaCakes118

  • Size

    387KB

  • MD5

    24c240810db96d07d5d14bcd0c2c52a9

  • SHA1

    c02fe92c52e54814d05e1c09d0042eff337a47a4

  • SHA256

    7af9f17806be11242d3307ac2da99f1d6acba8e9d27c8a05a93de92628c7f3fa

  • SHA512

    c7c5e1c6b5ea8ffc3f84c3ebbec51759673df84e8a83544d99b544cfaef13622cf9b3280f8e440250e6362cc74085ce2c6712a536021507c914d186cad4565a3

  • SSDEEP

    6144:TelrCRN8T2z9lwr1R6XdU9qRRN8T2z9lwr1R6XdU9q23ts1m8QXLbyOg4H:TbRN8T2v2sXdpRN8T2v2sXd41M

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.2.59:8443/INITM

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24c240810db96d07d5d14bcd0c2c52a9_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    7d9da1b3c45a4cf4d94863846e788cb0


    Headers

    Imports

    Sections