Overview

overview

10

Static

static

10

be1f086d38...18.exe

windows7-x64

10

be1f086d38...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    be1f086d38a4ba6fa6745aa81b8c4f18_JaffaCakes118

  • Size

    72KB

  • MD5

    be1f086d38a4ba6fa6745aa81b8c4f18

  • SHA1

    ef2e45c766b6533df4ef14f26a24d25a209365f6

  • SHA256

    c2a281bfb4f75a9dc834f10dcf12a5be7bbc4da89f7d04da0aed75ba180d65f2

  • SHA512

    e796a1c5917dc8aeb1af2981bf32d44e49b867aa75d4cbbd3923ec07ea1345c3483ea54be8fa3a85b91e7014227a30c3bd93ccf96251d95c51af51a6b0b9350c

  • SSDEEP

    1536:IvxM2zH9KjDt8zMTtrmGqtgarMb+KR0Nc8QsJq39:Ex1hKvizCrmG6gare0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.105:31337

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be1f086d38a4ba6fa6745aa81b8c4f18_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections