Overview

overview

10

Static

static

10

38aab81acd...18.exe

windows7-x64

10

38aab81acd...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    38aab81acd8fd5cd14dfb5b38715ce37_JaffaCakes118

  • Size

    72KB

  • MD5

    38aab81acd8fd5cd14dfb5b38715ce37

  • SHA1

    6cc2fa19fe203f1fab330a070e5fe54a43219eff

  • SHA256

    1d166a721d2947d333ef959fe77153104c9b445d5c18954980d60a08da31baed

  • SHA512

    b0703e457d9d023173799bcc622cf3c2b72b54590f12f4ce5c66b4b5e5428fb112805685b3e6f3ee5e376606eb255e0432f691ba0d3c0f4d519a6f879922435a

  • SSDEEP

    1536:I4j45UwaSjvpRah3cCBstJq0J0WspcKMb+KR0Nc8QsJq39:PLwaaLah33qcWEcKe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.101:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38aab81acd8fd5cd14dfb5b38715ce37_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections