Overview

overview

10

Static

static

10

a369cb5e03...18.exe

windows7-x64

10

a369cb5e03...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a369cb5e03b1075bedbc5708e041ba39_JaffaCakes118

  • Size

    6KB

  • MD5

    a369cb5e03b1075bedbc5708e041ba39

  • SHA1

    038d2f85411cee39ee173f445b8d8214603ca6af

  • SHA256

    8e3df9ed230775d8e82ac2c42d7d82c131fced19686d0c8f4fbf6c6623c6ddfe

  • SHA512

    d3579e3017e890efd1a4f4b31fb431a0ac271e88eafda25e5edcef27c60fbb203500ba31452c476556dafcd6e1078942153a02d8fe7cbc14963208b5cf0dee19

  • SSDEEP

    12:7GSGRQqwkwgsDre89lrJZvlTBvZE8iPkicevh1n2b1IGr5rp:7GS2TRDsDreKlr1FZodbHn2b5rp

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.10.2:1234

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a369cb5e03b1075bedbc5708e041ba39_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    87bed5a7cba00c7e1f4015f1bdae2183


    Headers

    Imports

    Sections