Overview

overview

10

Static

static

10

ad9ced5a6d...18.exe

windows7-x64

10

ad9ced5a6d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad9ced5a6d5e717c01de544618177137_JaffaCakes118

  • Size

    72KB

  • MD5

    ad9ced5a6d5e717c01de544618177137

  • SHA1

    5d97e94ab5ad77613f0e5f553bc7ef6d6ce504f2

  • SHA256

    c0ac29e5b3bc1b852cc7b91828da192a172624621c3959424ac502d43c16e8d4

  • SHA512

    97162c1835ecfbc1f8b53c3c7b53ca94ca795f26710d1094d2dc66c80a9f079ecfe73d17b4ae6ad1ef8e32583e39bc59c986b8a2c86cb841b6ccac0b806f24c0

  • SSDEEP

    1536:IpkBLqXRHVcxkRUY3qFk8+VR3JV8P2lnbc7fwMb+KR0Nc8QsJq39:B0lmYUUep+VNzGwe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.50:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad9ced5a6d5e717c01de544618177137_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections