Overview

overview

10

Static

static

10

c1b62dab0d...18.exe

windows7-x64

10

c1b62dab0d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1b62dab0dd8bcdea952663a6b9e7ee8_JaffaCakes118

  • Size

    72KB

  • MD5

    c1b62dab0dd8bcdea952663a6b9e7ee8

  • SHA1

    78c93b201bb57c4c5f1a84e93cd2c26475af4262

  • SHA256

    c9bc1cbadbbf040b82cca32953c6f3929c3e01a397c5761e2a3c146212673f26

  • SHA512

    aa25f4bb6f91b8faa4e63706cda776fb4973bbbda666f81a8495c95fe651dc71a84199c73ee2f366412d04f7b165cfd665713f852ecf622cad9835742e2eb0a3

  • SSDEEP

    1536:IEwVy9QwlKxiS4pIpd/7spP8NZxVKScl0f78bnivkMb+KR0Nc8QsJq39:JEaKwSAIpCP8NZWB6T8eke0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

178.73.111.243:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1b62dab0dd8bcdea952663a6b9e7ee8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections