Overview

overview

10

Static

static

10

5ef96d8b06...18.exe

windows7-x64

10

5ef96d8b06...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ef96d8b0652249b6397eab8f9a1a2fc_JaffaCakes118

  • Size

    210KB

  • MD5

    5ef96d8b0652249b6397eab8f9a1a2fc

  • SHA1

    6e37c8d5b8f971dab366f035763ba8752f376ae8

  • SHA256

    41aa3e7970dc3d9255b8018747367cef430a33c830a9bbee68de54b3a490ebe7

  • SHA512

    60eaf39e039964d7c455af04695a5413769fa46f333588787b9eda7cdcee99e1d2adcea0a018a8d6eb5be7c309dffac56e1d8a9fe0e57f51b7ad20e96be80029

  • SSDEEP

    3072:vUXZb9xCWdFv207jxBgoqhErntNDHpaZR47tCsKD4QhM/2AyXlX:8XF9xCWdFu07jxBgoqhERNIZRtsGhr9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.2:1985

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ef96d8b0652249b6397eab8f9a1a2fc_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    1744867817464bf7dd34561e44925565


    Headers

    Imports

    Sections