General

  • Target

    9671df266980938313615d140be6ed62_JaffaCakes118

  • Size

    12.1MB

  • MD5

    9671df266980938313615d140be6ed62

  • SHA1

    de5d7a97fede7abfd2de840422305dd69463ef71

  • SHA256

    8fb0ce88b39069c7424c64ab9d30b3b8daa5da9fdb72a52d31f45b494a8eadcd

  • SHA512

    03b116cf2f96b12947fa9cca5daca574e5ba34131ec722e3a4f253036ac741c4b247c7975d9c5cdfbc29ddc01156349bffaa51a6f26b622bd43bf7aab6e44d22

  • SSDEEP

    196608:kmdEO6WoMzFR2Ews0eEHORinOjmHjzYSZZpBqdxSMgtdTmXNTQwjs/8Q2EZsCU3O:QqkdTIin/HbpyqdTmY/81EZsCi

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 2 IoCs
  • Unsigned PE 34 IoCs

    Checks for missing Authenticode signature.

Files

  • 9671df266980938313615d140be6ed62_JaffaCakes118
    .tar
  • checksums.yaml.gz
    .gz
  • checksums.yaml
  • checksums.yaml.gz.sig
  • data.tar.gz
    .gz
  • data.tar
    .tar
  • .gitignore
  • CONTRIBUTING.md
  • Gemfile
  • LICENSE
  • README.md
  • Rakefile
  • data/android/apk/AndroidManifest.xml
  • data/android/apk/classes.dex
    .dex
  • data/android/apk/resources.arsc
  • data/android/meterpreter.dex
    .dex
  • data/android/meterpreter.jar
    .jar
  • data/android/metstage.jar
    .jar
  • data/android/shell.jar
    .jar
  • data/java/com/metasploit/meterpreter/MemoryBufferURLConnection.class
  • data/java/com/metasploit/meterpreter/MemoryBufferURLStreamHandler.class
  • data/java/javapayload/stage/Meterpreter.class
  • data/java/javapayload/stage/Shell.class
  • data/java/javapayload/stage/Stage.class
  • data/java/javapayload/stage/StreamForwarder.class
  • data/java/metasploit/AESEncryption.class
  • data/java/metasploit/JMXPayload.class
  • data/java/metasploit/JMXPayloadMBean.class
  • data/java/metasploit/Payload.class
  • data/java/metasploit/PayloadServlet.class
  • data/java/metasploit/PayloadTrustManager.class
  • data/java/metasploit/RMILoader.class
  • data/java/metasploit/RMIPayload.class
  • data/meterpreter/elevator.x64.dll
    .dll windows:5 windows x64 arch:x64

    0488da1988e5da3ab85ac50897661d0c


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/elevator.x86.dll
    .dll windows:5 windows x86 arch:x86

    7c5f250ba58f1406db94bb7f2181ad77


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_espia.x64.dll
    .dll windows:5 windows x64 arch:x64

    e77a5fe458b7a76c0ed315404b343deb


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_espia.x86.dll
    .dll windows:5 windows x86 arch:x86

    5656efd599672c5c9ed1d422e812d187


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_extapi.x64.dll
    .dll windows:5 windows x64 arch:x64

    cf208ece67932e6b7f27e2e7edb98e3b


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_extapi.x86.dll
    .dll windows:5 windows x86 arch:x86

    ed17d4037ca31238948f841ef8b4142c


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_incognito.x64.dll
    .dll windows:5 windows x64 arch:x64

    03c873f44c71001f10be4d1ef633bd0d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_incognito.x86.dll
    .dll windows:5 windows x86 arch:x86

    e8237f0904dd30ac62d636af15b3658c


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_kiwi.x64.dll
    .dll windows:5 windows x64 arch:x64

    6b56153664d829f70fd040a23ed75713


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_kiwi.x86.dll
    .dll windows:5 windows x86 arch:x86

    2d6f47a3b830f8acea40310e8e8b331f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_lanattacks.x64.dll
    .dll windows:5 windows x64 arch:x64

    05af08f92a566c6c99b116a9411dca09


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_lanattacks.x86.dll
    .dll windows:5 windows x86 arch:x86

    f9e0c5f18dcc1a8f87919fa48a3d00bf


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_mimikatz.x64.dll
    .dll windows:5 windows x64 arch:x64

    93a609e5bac50edf2e03d53405388ee7


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_mimikatz.x86.dll
    .dll windows:5 windows x86 arch:x86

    3bf3c00da61efed30928b6a090288292


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_peinjector.x64.dll
    .dll windows:5 windows x64 arch:x64

    daaac21008635ecf6ad1d4eb14cb60a0


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_peinjector.x86.dll
    .dll windows:5 windows x86 arch:x86

    23f5518a9565417cda7e9b9478aff344


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_powershell.x64.dll
    .dll windows:5 windows x64 arch:x64

    ec5ef6f2db89283a900fe8b70981ad89


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_powershell.x86.dll
    .dll windows:5 windows x86 arch:x86

    323d1c44ff34ee72b0869f1c0b500272


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_priv.x64.dll
    .dll windows:5 windows x64 arch:x64

    80ad9585a3c297c7dd29382d0974b66e


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_priv.x86.dll
    .dll windows:5 windows x86 arch:x86

    8061360dc6f359d03ceae7ccd5ac1749


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_python.x64.dll
    .dll windows:5 windows x64 arch:x64

    40a216fe96b7193cab479a6c231c10cf


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_python.x86.dll
    .dll windows:5 windows x86 arch:x86

    dc57dcd9bdd4e5c34d2baf716a846f67


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_sniffer.x64.dll
    .dll windows:5 windows x64 arch:x64

    c86b225d7c034d14a215f4efb5540a2a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_sniffer.x86.dll
    .dll windows:5 windows x86 arch:x86

    aa6294c141a5a2055de08c5d6b57bb50


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_stdapi.jar
    .jar
  • data/meterpreter/ext_server_stdapi.php
    .ps1
  • data/meterpreter/ext_server_stdapi.py
    .py .js
  • data/meterpreter/ext_server_stdapi.x64.dll
    .dll windows:5 windows x64 arch:x64

    e1a1f340bb43416b950ae6b72f5549cc


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_stdapi.x86.dll
    .dll windows:5 windows x86 arch:x86

    1925d45456b8d65784b2114554b9f78a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_unhook.x64.dll
    .dll windows:5 windows x64 arch:x64

    1703aeb43c01a8f109a4e74329c12f29


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_unhook.x86.dll
    .dll windows:5 windows x86 arch:x86

    699165a8d26c3b49923fb81586978aad


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_winpmem.x64.dll
    .dll windows:5 windows x64 arch:x64

    c233b583d4eb4fbb16f762001ae07758


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_winpmem.x86.dll
    .dll windows:5 windows x86 arch:x86

    2bcbfa3fb95560a777e4d82196db1a8e


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/meterpreter.jar
    .jar
  • data/meterpreter/meterpreter.php
    .ps1
  • data/meterpreter/meterpreter.py
    .sh .js linux polyglot
  • data/meterpreter/metsrv.x64.dll
    .dll windows:5 windows x64 arch:x64

    0907fa130fac126ff0bb37eba930cd71


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/metsrv.x86.dll
    .dll windows:5 windows x86 arch:x86

    6b298749729d6686dffc6fab0dc2ea1b


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/screenshot.x64.dll
    .dll windows:5 windows x64 arch:x64

    076dafe7e285e814b4e9b64d814f4ef9


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/screenshot.x86.dll
    .dll windows:5 windows x86 arch:x86

    c14e539c86defe89b53d81d6e720c52c


    Headers

    Imports

    Exports

    Sections

  • lib/metasploit-payloads.rb
  • lib/metasploit-payloads/version.rb
  • metasploit-payloads.gemspec
  • data.tar.gz.sig
  • metadata.gz
    .gz
  • metadata
  • metadata.gz.sig