Overview

overview

10

Static

static

10

bb77024709...18.exe

windows7-x64

10

bb77024709...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb77024709c198f46d360f4a40b0cb20_JaffaCakes118

  • Size

    472KB

  • MD5

    bb77024709c198f46d360f4a40b0cb20

  • SHA1

    83087db2da88e706ada087be087f2637f7a3841a

  • SHA256

    e206b01f19510ec9b82211655a08a2bdd0d5eace6734826b298ae399016c89b6

  • SHA512

    bfe02d94a81198ad8ce7c99e1a9f2e568966688e548ab56ce621a535957bcfc73171ceb04550edcfc3c6d5e60ecc2a7656040d21f98b37449d8160839a6c702b

  • SSDEEP

    12288:HuYX63e7EV/E16nWjyBOa36zaCUanV6I:HG3e7ERBOrCaV6

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.6:7007

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb77024709c198f46d360f4a40b0cb20_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    74638b0911b0c9268aae1edee5a60a9f


    Headers

    Imports

    Sections