Overview

overview

10

Static

static

10

8791547e31...18.exe

windows7-x64

10

8791547e31...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8791547e313da0e9f2830e4e8165b298_JaffaCakes118

  • Size

    131KB

  • MD5

    8791547e313da0e9f2830e4e8165b298

  • SHA1

    3a21c7756906c005652f5459e82bc0798b1d5af8

  • SHA256

    2c6122d412cec6fa3332683d9b99a05dcd8504bfdc581ef28c4eb828a8a0af48

  • SHA512

    4be55251374024022ebb9bb11c09d99fde9c6a5e4b72d9851451398a5e5d9f89f8b6b1befa86bf3e83b6c6f22870404476aa2668231b04a9fdf434a37b47a097

  • SSDEEP

    3072:Avo4asUbgNwWK+4LNQdCcarWVWy5oQscEzwEocoY2:ABahBW34mdCca6VWy5HscCwEocof

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8791547e313da0e9f2830e4e8165b298_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections