Overview

overview

10

Static

static

10

bce8b4042d...18.exe

windows7-x64

10

bce8b4042d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bce8b4042d9cae8fc2f17d871ecb1849_JaffaCakes118

  • Size

    72KB

  • MD5

    bce8b4042d9cae8fc2f17d871ecb1849

  • SHA1

    f17f407e2ba37678faaf9c09ac3bfddc4333e6f0

  • SHA256

    981ec881f3fc8acb4e90d36b078eeb76e4380d41e36ad7f5a6d6bd2302db9757

  • SHA512

    3ece5205d772f851a1b668b5610c6295c963ff6e9995335004f6b51cba733ef3740858630b3995a4e4a65fdbd9a5bb60b12d73dcc2bef5d66f748b6b64008bc0

  • SSDEEP

    1536:I6Q+agnPc0D7rCegbUxRhAitmGZcp4Mb+KR0Nc8QsJq39:whgk0/rCERha0cp4e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

94.249.118.242:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bce8b4042d9cae8fc2f17d871ecb1849_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections