Overview

overview

10

Static

static

10

96800e544b...18.exe

windows7-x64

10

96800e544b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    96800e544b64dee1539d0f80ca3b38f9_JaffaCakes118

  • Size

    306KB

  • MD5

    96800e544b64dee1539d0f80ca3b38f9

  • SHA1

    709bfbc86efc87ec324d942d8a57da781a55b3bd

  • SHA256

    2445ca280926906895d426c47f3d1503f03246566d6b0ebf4f399324fd8e7a40

  • SHA512

    46bb3e60205f81f1b356b30714170b050b2f54b17ac97967e15f004b0bf934b4e848a424026ea1dc439f0f5a35b7fe3d20cd243b6f7db9d878481573b3ff58a4

  • SSDEEP

    6144:rfBqq8W/1MW8WqERmz39WF6LacZ2yai0WqoCTVtAmIR2:rLvqYHULAc+dovKTv702

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.56.103:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 96800e544b64dee1539d0f80ca3b38f9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    59aa4bef6f0c5db8f58c22e5fb795be1


    Headers

    Imports

    Sections