Overview

overview

10

Static

static

10

68d6a66c7b...18.exe

windows7-x64

10

68d6a66c7b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    68d6a66c7b0c80436ba7cf691fedd690_JaffaCakes118

  • Size

    72KB

  • MD5

    68d6a66c7b0c80436ba7cf691fedd690

  • SHA1

    e60b4360b166bff1134b089ca78170dd7d412994

  • SHA256

    7adf7621cb4c4945c1efe4bad77207e73f2b6fe172a26f7d5dcb256ffcfe8092

  • SHA512

    d4d5fbf892c0b2fa2561c9fc111b4a1fccfdf4757b5355d85c73eed049252f14eca2c8e8645b20bb391d2b4c566aa90e60f4f70db9dabb55384d0dbabc2bbadb

  • SSDEEP

    1536:I1/7617rKsiJJ0DO6wf9lOlD4Mb+KR0Nc8Qs:8GVKzJ0DO6klOlse0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.210.11:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 68d6a66c7b0c80436ba7cf691fedd690_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections