Overview

overview

10

Static

static

10

a19428a494...18.exe

windows7-x64

10

a19428a494...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a19428a494003b1ce404c2ed3ae57b4a_JaffaCakes118

  • Size

    72KB

  • MD5

    a19428a494003b1ce404c2ed3ae57b4a

  • SHA1

    aebfab0b515370ad523f998046a64388a82bc00f

  • SHA256

    b403e27cd4bbbc47e0460054fa59f9d0f97ca27209951fa46edf011610f5457c

  • SHA512

    0c8a0128a0aa8498c41de819126cbf133669821531b86b65ee42308f7b01493ac64cf1274b2e900ee11f8e15f287b6a03ab77f468e8d2886408c59d575345fb4

  • SSDEEP

    1536:IV3FdrXesm14qastuh305QMb+KR0Nc8Qs4+:4LrXVB6+39e0Nc8Qs4+

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

86.205.39.73:44444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a19428a494003b1ce404c2ed3ae57b4a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections