Overview

overview

10

Static

static

10

5cf2c6127f...18.exe

windows7-x64

10

5cf2c6127f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5cf2c6127fd41417b30abe5de4a824b8_JaffaCakes118

  • Size

    4KB

  • MD5

    5cf2c6127fd41417b30abe5de4a824b8

  • SHA1

    8b490e75696b334dddd1d3ad4a8fd2793216ab09

  • SHA256

    1efe295394399079dc76477a701a348ff2b74aa844f4034dc45cc49c59cc4f9a

  • SHA512

    c3ae9a5fca791fae310a0b569d3d7df9de70d7985ef30dfcbae3aa72967dd2690e7d5983cbc3c504b3dab9f07676f37de53206250282e31fb76d65e85f98648f

  • SSDEEP

    96:8iox4DZa13PkKt6itY+qpTGQhsSGVuwmm:/oe2cStY7pTz+Vu/m

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.5:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5cf2c6127fd41417b30abe5de4a824b8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f9ade0aa18f660a34a4fa23392e21838


    Headers

    Imports

    Sections