Overview

overview

10

Static

static

10

2dd2f481a4...18.exe

windows7-x64

10

2dd2f481a4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2dd2f481a43df443bf6c77b9fcf64b6c_JaffaCakes118

  • Size

    72KB

  • MD5

    2dd2f481a43df443bf6c77b9fcf64b6c

  • SHA1

    98b5b00f3967d1ce3fd0132cf97aeb169affb18c

  • SHA256

    3f9c6976040afbf0d0377270042615efdd021902f4a05d4f169238eed67e3115

  • SHA512

    a256d4079fdae74e5dd0f88dde2778a17cc83b78b0794aebc8b3d2cca81b349dfb4066ab956f8c928babfa25a85ee9b0fcf21ad78f08acd2312ba368ccb1db24

  • SSDEEP

    1536:ILXP2llOm1XM+GI+naRaZortjmxmxQNAEgY9dWPMb+KR0Nc8Qs:++3j8+4npwtjm9NBgSQPe0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

84.147.1.86:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2dd2f481a43df443bf6c77b9fcf64b6c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections