Overview

overview

10

Static

static

10

a4889435f0...18.exe

windows7-x64

10

a4889435f0...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a4889435f0e133272dd28984689b34bf_JaffaCakes118

  • Size

    72KB

  • MD5

    a4889435f0e133272dd28984689b34bf

  • SHA1

    88796f3ddae03f6f73120feb2ad7ec7fee5810c0

  • SHA256

    a59725045d649b9c9e0abf5fb318a4fe190bcb44f8e531bbf1c2287ca2424a94

  • SHA512

    634a150363acebf59426a1f67afb27d65d5a2d15ae5d936cb0c2527b9048214f6e5493c36e75e459353086c885d509b49c52fbfdad24d6e206212af54a431bcd

  • SSDEEP

    1536:IW5E8l4lQekvB4Sdt4+P5tNaiuWMb+KR0Nc8QsJq39:z5E8l4QeCBNzDQire0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.13:5555

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4889435f0e133272dd28984689b34bf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections