General

  • Target

    7797e0acd2715d36c685b4e5b6469c17_JaffaCakes118

  • Size

    5KB

  • MD5

    7797e0acd2715d36c685b4e5b6469c17

  • SHA1

    7321579845b9c4a6f556ba2aced5f142c1fc74f6

  • SHA256

    3a5d3cf731094f13a0063355fe449f6cdd8a0021b3a7898d57426f39377c217c

  • SHA512

    b3f352d4f13f97cee21c712a1618a20ac43ecb1e0397e1c383bce2d570c32edc308d3795fefc51ba6ed5618e9ab34a9db6d8f7f2d6ef3c34b6a375e081586842

  • SSDEEP

    96:jcWllnK5psEkj19J7v9S/7PlHhdO25cFCnrkti:pKTsEo1f7VSBBdF+wnrkti

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7797e0acd2715d36c685b4e5b6469c17_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections