Overview

overview

10

Static

static

10

bae8d2ebdd...18.exe

windows7-x64

10

bae8d2ebdd...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bae8d2ebdd174d7fa0872befe602b744_JaffaCakes118

  • Size

    72KB

  • MD5

    bae8d2ebdd174d7fa0872befe602b744

  • SHA1

    8660f4f315426a6c9db207af7188c1a84b7a5d1a

  • SHA256

    29746bad3d4ee45d0570c055a22edf36de17a34b26bbaf8f065c7411e87f93c0

  • SHA512

    1d6cd86a20163824f5956c4a7cc01c6e1513d20f9cdcb7546cd761810f000bd9de61fc48711806a326c3f94b3cc1d48c81c6628f3b2305087b141de59e39f7f6

  • SSDEEP

    1536:IhJBnwrFvQxTFkz6rtBBhsSQNF4Npvuk01FV601GMb+KR0Nc8Qs:0LqQxTFUrhH4Npvi1Ge0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.14:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bae8d2ebdd174d7fa0872befe602b744_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections