Overview

overview

10

Static

static

10

8e69c7e03b...18.exe

windows7-x64

10

8e69c7e03b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e69c7e03b97edc93ee376ffc8060add_JaffaCakes118

  • Size

    2.3MB

  • MD5

    8e69c7e03b97edc93ee376ffc8060add

  • SHA1

    c735a3169d4e02272cba9b71094a253f794a5308

  • SHA256

    03a979f58b435971a0fada578bc142e5eb387e1e31bcc80f607fd92b52f7cb88

  • SHA512

    9ebce79b3dd71ddcaf6bc2637f62822e0606b8872b441531d22c83baf896e3d2cab2c31dd6b8bf1f4b1abfbd12885c956cdf875dbd0bd2892f9e15ddeadb3561

  • SSDEEP

    49152:xWZnIB5cJUm8S1iDHsepN45f/xu5Rnjl0IRzr7:g9IgJUmJiDHROfQ5Rn2IRn7

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.43.110:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e69c7e03b97edc93ee376ffc8060add_JaffaCakes118
    .exe windows:4 windows x64 arch:x64

    015c6cfe615d839fa3dadcd6c55887d2


    Headers

    Imports

    Sections