Overview

overview

10

Static

static

10

aedd46a3bf...18.exe

windows7-x64

10

aedd46a3bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aedd46a3bf3b7a9976d62b79d03dbf58_JaffaCakes118

  • Size

    117KB

  • MD5

    aedd46a3bf3b7a9976d62b79d03dbf58

  • SHA1

    5da84db70f6844d95c987c92f12cd2fe1914e86b

  • SHA256

    90afb37ef84b59f1cc33adbb6bfb6c481b24ef8008a9a7f7673bede81e5f0a9a

  • SHA512

    dc105e896d83cf19c80cd973041da1e4bf25e346b8dc4d6d740b4ef25c5e99f7fcbfa13c8a421d481e11197d0f0d9bf9063342b62ee9e19376e5516bf379d960

  • SSDEEP

    3072:b0oWBdY0BPl1L74vIxdU6qsL6OoaMx/c59+fF:hWB/1LU0UWHoV/c59

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • aedd46a3bf3b7a9976d62b79d03dbf58_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections