Overview

overview

10

Static

static

10

616c84904e...18.exe

windows7-x64

10

616c84904e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    616c84904e658ba0363ae1997cec1dcb_JaffaCakes118

  • Size

    72KB

  • MD5

    616c84904e658ba0363ae1997cec1dcb

  • SHA1

    3c68a00b6079e2d02a31611e98a7f2d124aa70eb

  • SHA256

    d9b9d0bd371270a07a3a8f142452712cf5f35a60f89b44f17630f2c89a6a3b70

  • SHA512

    e924dd8f8418e1cd1c4134645b03f38bde81489e151a61b9a0da17fbf37718fe670a030610c4c2ee399c8e0e8f9aeed3ae355d2f617fd5cf9e66dda1be00fc8a

  • SSDEEP

    1536:IqO4NqKk2sJKF5rTOCBJOrBFROMb+KR0Nc8QsJq39:pnk2sQ7Oroe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.4:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 616c84904e658ba0363ae1997cec1dcb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections