Overview

overview

10

Static

static

10

836b21a388...18.exe

windows7-x64

10

836b21a388...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    836b21a388b15f63b9778fc8337f598c_JaffaCakes118

  • Size

    37KB

  • MD5

    836b21a388b15f63b9778fc8337f598c

  • SHA1

    f5e0d719bf21f513480794189aa0454cb662bfb8

  • SHA256

    6aa1c17214e3e8a5fa4ffa001ba2561acc6fc98056d6a7034b3ae41462d148e1

  • SHA512

    528eea76825bdc196e9533e936ea985d113aad888e56108992a9e8190de92ebe4f7736deeb7fd54d329864ac5951feff78070965435c987b5460f0c3287cf904

  • SSDEEP

    768:tVAtSt3j2r9CUI07aO7A5SLNPMsKpp6lRZ95x:Djt3yBkmNPMX0h5x

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

94.142.33.207:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 836b21a388b15f63b9778fc8337f598c_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections