Overview

overview

10

Static

static

10

3a8af1a3be...18.exe

windows7-x64

10

3a8af1a3be...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a8af1a3be239a0c33e8628c45121cc2_JaffaCakes118

  • Size

    72KB

  • MD5

    3a8af1a3be239a0c33e8628c45121cc2

  • SHA1

    e2c4fbfbb1804491b16c4f80d7062b0fb0975ca8

  • SHA256

    865e9f16df1cae8a90aa5fedc4c534c88dfcb2dcc2a23ec971f271cd033bde8f

  • SHA512

    a5c59ee1520d68c83c59fd6786efcee90370881547cf0240e2a414672242162ce12602c5b0549826c4d2d1af7104d097bc875fadbf77aa59db95a6b3d99dad06

  • SSDEEP

    1536:IPK+iL4jc5VPX8uysQKN4np86x019CpL8WrAHnIU6Mb+KR0Nc8QsJq39:9+Nc5VPMuysFk86xmCpn2IU6e0Nc8Qss

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.12.108:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a8af1a3be239a0c33e8628c45121cc2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections