Overview

overview

10

Static

static

10

599655cfd3...18.exe

windows7-x64

10

599655cfd3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    599655cfd39a9a857d949704a6bd2af2_JaffaCakes118

  • Size

    37KB

  • MD5

    599655cfd39a9a857d949704a6bd2af2

  • SHA1

    8490e7fd5f3f3a46db6fbed75d856908267dbde5

  • SHA256

    c9cc17fd953993f38447e1758a0494955c1f919208919d369c03168fdc6f4eb2

  • SHA512

    25cee17960b1bc615685bed13a6b1a1c36b19f64cec8c853b5594f625c712d4df6e9be7e448a659c360059e9f0f851b2c7567fe60def8a26b5ce6c909f70b2cd

  • SSDEEP

    768:9ySwyj2z6+UIpUrO7AQoqLTcPMsKaQ6lRZ95x:tpDj6khwoPMXKh5x

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.10:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 599655cfd39a9a857d949704a6bd2af2_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections