Overview

overview

10

Static

static

10

a3ccc55e59...18.exe

windows7-x64

10

a3ccc55e59...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3ccc55e59b0a227d88ea1e35ac70785_JaffaCakes118

  • Size

    67KB

  • MD5

    a3ccc55e59b0a227d88ea1e35ac70785

  • SHA1

    26c8422044fc51ad260961ec723265175308ecbb

  • SHA256

    cf909a7a84344bbfda49b7c3aac566aa9ff6d8eb685e5898b104342aef135e1c

  • SHA512

    9bc95c25209e2b989c3d42dd16d84d14fe85f93105264e95f0459c23f14fbf12dd2bec1df814ce6b290d163487b1b72ce2b55c686913de08b591b29b314ff7d4

  • SSDEEP

    1536:N1esHnxpnHQZd/vCI0foMJUEbooPRrKKReFX3:PesRp69CI0fFJltZrpReFX3

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.26.129:6666

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3ccc55e59b0a227d88ea1e35ac70785_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    419c3fe8c1eefea9336b96f74f0951dd


    Headers

    Imports

    Sections