Overview

overview

10

Static

static

10

a880ddc140...18.exe

windows7-x64

10

a880ddc140...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a880ddc140229e898ac4fcc474209024_JaffaCakes118

  • Size

    116KB

  • MD5

    a880ddc140229e898ac4fcc474209024

  • SHA1

    125bcaa382f7b348b6a156e8f630f65f91f8d7e2

  • SHA256

    48f32c6d8a6f5662365b47319034ae6a729ed8c41e5a77ec245d3f6f0f72a8d8

  • SHA512

    5258bfe79be84fe3d3cdb66853fab64b38536324ab85da77295fc49556e10bb9bd5e49673011a4e75cd9d5e12083e7bab74324dbb0ad5f36f823d8f48ea300ca

  • SSDEEP

    1536:rll14rQcWAkN7GAlqbkfAGQGV8aMbrNyrf1w+noPvLV6eBsCXKc:rfmZWXyaiedMbrN6pnoXL1BsC

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.235.134:666

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a880ddc140229e898ac4fcc474209024_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    08f6a1b121da8cedde2d1089d0906ed8


    Headers

    Imports

    Sections