Overview

overview

10

Static

static

10

753b9d4712...18.exe

windows7-x64

10

753b9d4712...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    753b9d4712d98058e076ea88406a92c9_JaffaCakes118

  • Size

    16KB

  • MD5

    753b9d4712d98058e076ea88406a92c9

  • SHA1

    cefc562848b61211a7324e3294317eac1a9e5684

  • SHA256

    c9d8111dcfebe942de601e5473cd3a5a45bc2ce91be5af3437597a0c4dbc17a5

  • SHA512

    2b1fdf2ced4239737c56f7802c92aa78f950b373ee9dc0fe10aae0f547e0b9b7702023f9bd43bec5609304623ec9d9e94d7602b6ba5ae28302e6581becee2469

  • SSDEEP

    192:xzH6KUzFjvs914Y0Zr3yqMvJ5iTPf+qOkjyFoqcCDq:mFjvs9WxZrCqMPirxeaqrW

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.28:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 753b9d4712d98058e076ea88406a92c9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    757d118639785a88cd772d5f709d2401


    Headers

    Imports

    Sections