Behavioral task
behavioral1
Sample
83f0267b6cfdcc6ce95ef06a6787ea7b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83f0267b6cfdcc6ce95ef06a6787ea7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83f0267b6cfdcc6ce95ef06a6787ea7b_JaffaCakes118
-
Size
34KB
-
MD5
83f0267b6cfdcc6ce95ef06a6787ea7b
-
SHA1
2b3894495d86d4f5c5e86678beb8519703aca9f3
-
SHA256
654a758f04816cc9f7044202b429400c3d21feee977a39ed615570537a591dfa
-
SHA512
179b3358f516cb1da6dc06e97b9b76a44e4048b1d489acb4640a3bcfe33f67b4bcaf2969ae2ebdab646e570a657a4e9144e97d6e52fcf440187b0cdd418a192a
-
SSDEEP
768:IlICnDV2s3qRzLRcFQ+ZH49d5X0xCV1EacDw9EKvcYM8l1:IlICDV2S+LGFQP39EKv9M8l1
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Extracted
metasploit
windows/reverse_tcp
192.168.56.1:6666
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83f0267b6cfdcc6ce95ef06a6787ea7b_JaffaCakes118
Files
-
83f0267b6cfdcc6ce95ef06a6787ea7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ