Overview

overview

10

Static

static

10

9503c35eea...18.exe

windows7-x64

10

9503c35eea...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9503c35eeaed5b2c1d6911a69b19220f_JaffaCakes118

  • Size

    72KB

  • MD5

    9503c35eeaed5b2c1d6911a69b19220f

  • SHA1

    00b4f6fe4cbe20aac581627ccd2c738d3f58842e

  • SHA256

    8b91278eed7af0f4bd3475bb7cd66c0338ec16f2cdb8ff43fbacb7d0a3ea7b9d

  • SHA512

    e7b1d62ced0fe04afe37eac615cdbfbb5be6d4fdfc81b4adb90b1904bf5a2f850465dbab74c3ac72917860eddbd3871347cf47ebb0f55c1ca737f63000f5c0e0

  • SSDEEP

    1536:Iu0PuQraU7fo/1eecPq4g32Bf/Mb+KR0Nc8QsJq39:dQrzQdeeegG/e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

117.192.106.28:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9503c35eeaed5b2c1d6911a69b19220f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections