Overview

overview

10

Static

static

10

a974567706...18.exe

windows7-x64

10

a974567706...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a97456770632e321048406e5811ea0b3_JaffaCakes118

  • Size

    72KB

  • MD5

    a97456770632e321048406e5811ea0b3

  • SHA1

    c85f9e861be1a52d298d20bd811fbdc5e031625b

  • SHA256

    88b1a529d5b4d10f231762a771a90b936c172a30b23971a78965d0651d0b05a7

  • SHA512

    133187c681fb9ffeae6b8065907b1ee9b25e320e1ec68daf4f029d8f0565291eac12e8b5a4c8acbb5ca3326285e61077e9225b4ba3e2fec68970d2b943545f1d

  • SSDEEP

    1536:I/2IXTrFpvzRz0JiHu1sZ9bedf76TU9HhMb+KR0Nc8Qs:0jjJpvzRGyZ9beKUje0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

178.248.85.67:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a97456770632e321048406e5811ea0b3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections