Overview

overview

10

Static

static

10

8cda774ba6...18.exe

windows7-x64

10

8cda774ba6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8cda774ba6edc696f8545ac1a3338b2a_JaffaCakes118

  • Size

    72KB

  • MD5

    8cda774ba6edc696f8545ac1a3338b2a

  • SHA1

    53f747f910f99afabf3c967b274fd16effbebc7c

  • SHA256

    3f6767ee25f1893398f26b54a19ef55f4db9f7e4fbdcff823728b8fb26e521d0

  • SHA512

    8711f947cc3f568f214086a07e3d9c45384a7f7ff34fa5394dae341da08e1086daa40f50e0fc10162dbb225aba06c47d98374b3203563d9a7a29f878b917f0fc

  • SSDEEP

    1536:IVDbNlNtOT5I1WUxPENjahIb28aQIIMb+KR0Nc8Qs:e3XeIlPcj5daFIe0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.5:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cda774ba6edc696f8545ac1a3338b2a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections