Overview

overview

10

Static

static

10

2cb52ced72...18.exe

windows7-x64

1

2cb52ced72...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2cb52ced72efbc2b0362f615a5c19ef9_JaffaCakes118

  • Size

    67KB

  • MD5

    2cb52ced72efbc2b0362f615a5c19ef9

  • SHA1

    44fbcf891fc69faef31fb896f9fd1e5b4cb698a1

  • SHA256

    8a6baa5c8421a0d480b3742f98ed267aaf6d034e906768154c419017310384cc

  • SHA512

    03bdf213fdad264b9d0fe07cc039b2af83b635a13386d479ab7e1506f41a6d01518c90e26f263df03777555884510498a54d0e72b4d572f2a3a534337a9f1997

  • SSDEEP

    1536:rBInFsPwe5xWOKbRefYMJUEbooPRrKKRl1P3:rmF0TXWFbRefVJltZrpRl1P3

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.99:31337

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2cb52ced72efbc2b0362f615a5c19ef9_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    419c3fe8c1eefea9336b96f74f0951dd


    Headers

    Imports

    Sections