Overview

overview

10

Static

static

10

2587c530c7...18.exe

windows7-x64

10

2587c530c7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2587c530c7d4f3dd7b73680a42a2a6ea_JaffaCakes118

  • Size

    72KB

  • MD5

    2587c530c7d4f3dd7b73680a42a2a6ea

  • SHA1

    e45f472168fa5b3ed464333b04f2b623ba1b1fd8

  • SHA256

    935a1f03d0e1feedcf21c62a5c4f91b3598a2e50020551ecca317d1b855c76f6

  • SHA512

    84fc8bb89c7f4f160ed23000e6dc2665104101a0168da6c07a8ea2f3bd5f256ab7ab134455fc1253c64700b69090cacac63af856d4571c8234f3d88265b0255d

  • SSDEEP

    1536:IzJtVIYaKHUPaN+I34bs+2di/p4f2V2OMb+KR0Nc8QsJq39:Qtr0yNPKKi/Wf2fe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.5.117:80

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2587c530c7d4f3dd7b73680a42a2a6ea_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections