Overview

overview

10

Static

static

10

9644682bd5...18.exe

windows7-x64

10

9644682bd5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9644682bd57465a3a13c6b780035298d_JaffaCakes118

  • Size

    72KB

  • MD5

    9644682bd57465a3a13c6b780035298d

  • SHA1

    67ab9c751615e49b975de2bb3511566b48b7b51b

  • SHA256

    a2a95bd988e6a394a2cec7ffdd745bb32ed4dd9aa032dceb53eb7e02488f47da

  • SHA512

    00e5b20fce2eab63bb658322b49f1e5e0516b1cd5963d86b9e63a2c6105f0bfc86d8480a7709e4dcb8b90ff9b578a03637ad1f02f23f6d80a40a75c1e2d57d64

  • SSDEEP

    1536:IwuY5G4WIVWTYHdVOUohY5YHsry9oS5Mb+KR0Nc8QsJq39:x5rWIVQYmUoI7rooS5e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.104:4321

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9644682bd57465a3a13c6b780035298d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections