Overview

overview

10

Static

static

10

70e8520883...18.exe

windows7-x64

10

70e8520883...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    70e8520883024248c1832d087eebcd0a_JaffaCakes118

  • Size

    72KB

  • MD5

    70e8520883024248c1832d087eebcd0a

  • SHA1

    4d66d75669b70a77d2eb07452b9c52bcfd214ae4

  • SHA256

    023a43694f83d21cea9121fe4e4571e199cfc342d87eaa94a36e3e6070719df0

  • SHA512

    9e551e4b9102465a1a1ad2e84a2915051eb9fc7e9dc57dfa4d2bdf6d67a7323a955d5519cadd252557a090f36dbdc91d5d13425aae078c45560e931cafeef483

  • SSDEEP

    1536:IY1h4sHon1aKpmqmnmjZzuyMb+KR0Nc8QsJq39:Gn17XM2Zzfe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.206.128:5555

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 70e8520883024248c1832d087eebcd0a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections