Overview

overview

10

Static

static

10

36cab59c77...18.exe

windows7-x64

10

36cab59c77...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    36cab59c77a9723e9f67f879571c6877_JaffaCakes118

  • Size

    72KB

  • MD5

    36cab59c77a9723e9f67f879571c6877

  • SHA1

    f442e6327f794fa0131345b45f073ba0ea662711

  • SHA256

    c7df00910d39ed0f7e41c3d304423f718508db087b3d634fcee49552eaf3cfd8

  • SHA512

    33ff8ad5b67ae9744108995328f01520646c6df79bacebfdfb957c10cafa33df5bdc8c57b162cc713d8fe1acd7a59a29f7d2aa783b1c152d2c15dcee9f1e639e

  • SSDEEP

    1536:I1usNdmodiEEcMNN2mPeA6D83wDuVfv0A/eIi8KMb+KR0Nc8QsJq39:3snmo8XzimZ6D8cuNv0eeCKe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.7:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 36cab59c77a9723e9f67f879571c6877_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections