Overview

overview

10

Static

static

10

2f0fb3a09e...18.exe

windows7-x64

10

2f0fb3a09e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f0fb3a09ee73d7e70a849fece12a57c_JaffaCakes118

  • Size

    45KB

  • MD5

    2f0fb3a09ee73d7e70a849fece12a57c

  • SHA1

    a2b41e7a7dd44b9af3fa9320190a4034865ee225

  • SHA256

    37525d19445d4d753764795583d57c8068bf7d42d39ab4ed7c57808cffef69f2

  • SHA512

    2f3a148231cde28ab96c6d7cc47f4e64115ddc24241d8b7c1c5c02754b3e1d5076aa5a82ac5b9ed779b0828607ab1136668c4742149f0d3dd26580eb5da5b875

  • SSDEEP

    768:IEZZyjDM2sEn2bCosINtUjI99gNkYO1ZkkofwP3X206q8ygpK/qZbCq3:I9uEn2EINteS9bYO1ZTh/r6q85prGq3

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.67:4444

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f0fb3a09ee73d7e70a849fece12a57c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections