Overview

overview

10

Static

static

10

89d90c1d0b...18.exe

windows7-x64

10

89d90c1d0b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89d90c1d0baaa6f566e8fdd7af457ff2_JaffaCakes118

  • Size

    144KB

  • MD5

    89d90c1d0baaa6f566e8fdd7af457ff2

  • SHA1

    acd0dee7f48485cf72ed880908ebe3498684530f

  • SHA256

    939709f7fd3a03b6e65a262328a6022df979e30bf0c6740cee0294915558f624

  • SHA512

    731c9e623ec680d4548d86a41fe92aeccd3ab0ed9c0deff6ecf7b2fc148accea46a4b97393d204bb4ebe32c9272078d0f9692ae3ea75d15f095ad0b1e3fdaec3

  • SSDEEP

    3072:1m3KcUQqWk3yOl7e0Nc8QsC2zzkk0FVhqo8tTe0Nc8QsC9:1qHD3k3yD0Nc8Qs/zkk0Vqo/0Nc8Qss

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

88.198.144.101:5555

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 89d90c1d0baaa6f566e8fdd7af457ff2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections