Overview

overview

10

Static

static

10

3139120cba...18.exe

windows7-x64

1

3139120cba...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3139120cba565814409865d35675d1da_JaffaCakes118

  • Size

    112KB

  • MD5

    3139120cba565814409865d35675d1da

  • SHA1

    1072c5b107e5078480e941d141ef7907ad07990f

  • SHA256

    88f54e6ecb3a0819bc1b28d384751a82298379d7ea8daee05e1c93e70cba2586

  • SHA512

    2d93e0757db18eaca264f42705ddfa172919e652920bb994e81bf4c4ae02ba91bfcefc54e08d172794d255ef708cd72c03e857fa1d73360d77ac7235e68113b1

  • SSDEEP

    3072:VQLm6GkLB80OnjUi6kJO6HptiyIIIIIIIIIIYIIIT5:CLOkt80IVK4

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.101:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3139120cba565814409865d35675d1da_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b5e52413f62e0a75b919797e2900f007


    Headers

    Imports

    Sections