Overview

overview

10

Static

static

10

be87212dfc...18.exe

windows7-x64

10

be87212dfc...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    be87212dfc2bea1d8ea67acec091ab4a_JaffaCakes118

  • Size

    72KB

  • MD5

    be87212dfc2bea1d8ea67acec091ab4a

  • SHA1

    8cb0cd1158d91dffc98b16029153d7fd3ffd52a2

  • SHA256

    ba0edc77da67ee9203739fadff7135571f82e4a0e5f68983e165abf21d6c4fc4

  • SHA512

    338989cf851cbe31f4f9260336ca2ab5a581dabf9b59a45c698329b06fa4ae9ad62e680566f57aaf927c4f11761b3cbbb85af000bd4be528c5dae2277863090b

  • SSDEEP

    1536:I0EePFAn8QKhyrsgx2jvD5mu3vSfmQOCMb+KR0Nc8QsJq39:xMuy4ggtv6ze0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

189.123.215.97:5555

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be87212dfc2bea1d8ea67acec091ab4a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections