Overview

overview

10

Static

static

10

3294de628d...18.exe

windows7-x64

10

3294de628d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3294de628d6babbded4cffb8d19143c8_JaffaCakes118

  • Size

    72KB

  • MD5

    3294de628d6babbded4cffb8d19143c8

  • SHA1

    cc368014b49d51abd20c4f1df5fd871637f77ed0

  • SHA256

    81401d0f2bebcc39ae3925f2a66fc24306d24b3a4a0107d23523f9e4239d1fc9

  • SHA512

    be8f15d1fdbb4fd9cc9ea803692c4a4b85845089c177d026b3c2c10b33eadf66b9337841f674b8a8e0ef3de6127dcd3bd77193bdd17fb37d1ebbf3fe1c373ba6

  • SSDEEP

    1536:InawPPSqCXd7iyh1r/CJNphBAoutBKQMb+KR0Nc8QsJq39:yawPPSXXd7iyh1rYNpDARBKQe0Nc8Qss

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.2:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3294de628d6babbded4cffb8d19143c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections