Overview

overview

10

Static

static

10

c975716f0d...18.exe

windows7-x64

10

c975716f0d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c975716f0d4ca1a359e5a1a506b0e068_JaffaCakes118

  • Size

    112KB

  • MD5

    c975716f0d4ca1a359e5a1a506b0e068

  • SHA1

    26057589405cb9c4fb91777f3dcda359d32b1b95

  • SHA256

    bffaf47a4138b1ee2c071bb3f1e842e72c6bae9400bc22978918fd99dc69cd1c

  • SHA512

    be5106a75b718008ba01fe5d5841736e30d0a17e18ba394d9f2c8dd17f708704fbde5f91a6f4e406099e1e5815f8433c871d3b62e14e13ac53d8a6121f533368

  • SSDEEP

    3072:Dr4qEbZXcJZxr39V5Gt35Z6/zWPfoX7BsCRyV:X4q80ZxTPEt3MzWPfoBRs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.30.213:7880

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c975716f0d4ca1a359e5a1a506b0e068_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    08f6a1b121da8cedde2d1089d0906ed8


    Headers

    Imports

    Sections