Overview

overview

10

Static

static

10

49c1b0347b...18.exe

windows7-x64

10

49c1b0347b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    49c1b0347b6ead8f243b7e27dcc2376e_JaffaCakes118

  • Size

    72KB

  • MD5

    49c1b0347b6ead8f243b7e27dcc2376e

  • SHA1

    9656bc8f8f1ab0eba9c1979e0f91652dac405ed4

  • SHA256

    e55e8d075dc886c8d4f1f81449745d4f085d2e5a9c3f8c773a79186472f268c1

  • SHA512

    f4ef697d8d9665b5df12a902c6f8c936aa4e0ed437335fa610884bd7aee5e65de0e46ce5bbfbf868d247c9201ade3d87f3885856fb24e341746976be9c526b00

  • SSDEEP

    1536:IRtSk137mG4kIETi5W6jTQ3cZLQCIFoiMb+KR0Nc8QsJq39:QtSk1vlIH5WwWcZLQ1Foie0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.118:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49c1b0347b6ead8f243b7e27dcc2376e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections