Overview

overview

10

Static

static

10

c841219d56...18.exe

windows7-x64

10

c841219d56...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c841219d561c8ece9b5e6fb5b9a0da6c_JaffaCakes118

  • Size

    288KB

  • MD5

    c841219d561c8ece9b5e6fb5b9a0da6c

  • SHA1

    d5bf77b60502d47e1287b0f8e4c98fed61119080

  • SHA256

    575a748f126d072548eba6906a223e5eb6c72c5a92163897f1444720b4cd65c0

  • SHA512

    b736382be382e941238066dee85f398ffe9e4275887b2caf0c4c99740de72faa97292f1a83a1d32f8d8904022f8275f6182228a6116081309c847cfb0576f36a

  • SSDEEP

    3072:Zwgs+/ivoguE9NfEmqjpezohuL1TCAEDyriil2svDOXKqtLJ7nhEldB7fNkmQ+y/:qyqRiQoIpEClJq9bhwVLDy67cK

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://23.20.214.27:443/yI6d

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c841219d561c8ece9b5e6fb5b9a0da6c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    205fcd40c9562970436b9e64ad20e789


    Headers

    Imports

    Sections