Overview

overview

10

Static

static

10

621becaa6e...18.exe

windows7-x64

10

621becaa6e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    621becaa6e22907c19c0ace5d8999f3e_JaffaCakes118

  • Size

    438KB

  • MD5

    621becaa6e22907c19c0ace5d8999f3e

  • SHA1

    cde0925fbf14346af1ee2acc103bc0a29f5a7f73

  • SHA256

    676aa415658216d0e53a2af93b5c8db889b5a6cda4e26e9d4b868334989d5320

  • SHA512

    16d086fe405e2b1b22d80daebd03e696f3c5ccb7d89a1e20cc00bbe9f38d6008d36144e1100ebe5ff15eaba4d3f33543e8e80a577a73d2e2208824f2666946fa

  • SSDEEP

    12288:zWcCygMv/8d1UxnrvhS1LQIFVJ9Z7o3C847vNq:znCyP/8d1krvOLQIFVtk3n4r

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.12.88:4444

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 621becaa6e22907c19c0ace5d8999f3e_JaffaCakes118
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections