Overview

overview

10

Static

static

10

958fdd6a3f...18.exe

windows7-x64

10

958fdd6a3f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    958fdd6a3f0d8953684647fd576afd16_JaffaCakes118

  • Size

    72KB

  • MD5

    958fdd6a3f0d8953684647fd576afd16

  • SHA1

    abcc107337dab2e9c57d16dfaeafc23a56d9bf6b

  • SHA256

    642cf9301cb9e019a92f4c79fdeb26184b9a50e6ef181a76c670f59041ab9ce7

  • SHA512

    e62b974ce4b4b6b6a1a758f21db65ec35e2a89389a6d5d04fd3502cc1f9459e7787c49f1037f30b10e46a3da3c629d49b33188b76a5dedf2378f9cfda23cc3d0

  • SSDEEP

    1536:IeaV/aUEHANUsH89tjrLaeeK4Klj4P1J7Mb+KR0Nc8Qs:XY/DEHqitjr17Jlsre0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.56.102:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 958fdd6a3f0d8953684647fd576afd16_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections