Overview

overview

10

Static

static

10

c08d7b9f4a...18.exe

windows7-x64

10

c08d7b9f4a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c08d7b9f4ad7118fa966e3b072064bd6_JaffaCakes118

  • Size

    72KB

  • MD5

    c08d7b9f4ad7118fa966e3b072064bd6

  • SHA1

    2160b3e8ebe5b179b9e843a53479ebf3f6fe915b

  • SHA256

    1d9558477e4a9a7df087d002b38e0b83b5a308135ed83e4fb9cb0d7925e65dfa

  • SHA512

    37537127b470174f429275fbde023893ac1230866594536a278c5a1fe8e501a61e074f1fa7831bab5df7e66711ff5d0572450745b1f2053975e618c9d0d3c24a

  • SSDEEP

    1536:IZYSXi1S+cFJ5rOdr2w88xMb+KR0Nc8QsJq39:YPDZ5Kr2wBxe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

172.16.104.130:31337

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c08d7b9f4ad7118fa966e3b072064bd6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections