Overview

overview

10

Static

static

10

8ba5b1ef8e...18.exe

windows7-x64

10

8ba5b1ef8e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ba5b1ef8e3c963e8db44f280f31776d_JaffaCakes118

  • Size

    20KB

  • MD5

    8ba5b1ef8e3c963e8db44f280f31776d

  • SHA1

    2fa405bd0722759de1d281679982efa9d3f4ed0a

  • SHA256

    36e3b37025beeaa2eea28033407cbfa676e729d28e211512a557fabc3183a1a2

  • SHA512

    d8a0cb7295641ba5de8411627c375a0589525b447fcda42bc68a34fafb0533409112c41e3d6b8c27032d20ca0aad3985196505729b9b7bf81a272af6ce63f41a

  • SSDEEP

    384:nrANk3ntHrj2W8aOkTZuEvtDRH1BP2j1KVlm9I85Us2fNfsaHa:cQntfP8oT8orH1BOjoq8RNE8

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ba5b1ef8e3c963e8db44f280f31776d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections