Overview

overview

10

Static

static

10

8afc5e4c0f...18.exe

windows7-x64

10

8afc5e4c0f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8afc5e4c0f3c2042d50293794337f165_JaffaCakes118

  • Size

    67KB

  • MD5

    8afc5e4c0f3c2042d50293794337f165

  • SHA1

    c4b3f5fc887217f3674e8062f0de71e809a827df

  • SHA256

    c83a6d62af69c88bd3d2a4923934e2c8ee123b7e96569025584e6a49c480cdb0

  • SHA512

    426887cfe0287b61dd080872f137a4f34ecce51e0a5223f739b437a2de4d4d31df8d97476a68418ac7aaef664944fa82f244432ad40e4f6877748b75d0157e0b

  • SSDEEP

    1536:1wOnbNWKLjWDybbI0foMJUEbooPRrKKReFX3:PNWKPWDybbI0fFJltZrpReFX3

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.80.128:13433

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8afc5e4c0f3c2042d50293794337f165_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    419c3fe8c1eefea9336b96f74f0951dd


    Headers

    Imports

    Sections