Overview

overview

10

Static

static

10

b6925dfa29...18.exe

windows7-x64

10

b6925dfa29...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6925dfa291e87556b882b41a00213d4_JaffaCakes118

  • Size

    72KB

  • MD5

    b6925dfa291e87556b882b41a00213d4

  • SHA1

    b8f7e8476c8f3c212a8a008dca7e0144a5e5cc04

  • SHA256

    495e36af6586b70bd0d0373c8be8a306b4ff54a216cfd8ee7a865c277da7a09d

  • SHA512

    d32acd241687d210c848b46b174ddbedd03cab85eb01db98e3bc1856f7f07036062f8ac1a6474c727f4c7dc77832651641c4f83e803612295ae098ccec770f09

  • SSDEEP

    1536:ISvbDm163wbRQw55ucEUFg4+iYRmXReU+Iw0ZMb+KR0Nc8QsJq39:DzDm17bF5GUy4+irReU+IfZe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.206.154:1563

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6925dfa291e87556b882b41a00213d4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections