Overview

overview

10

Static

static

10

cf3b494634...18.exe

windows7-x64

10

cf3b494634...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf3b4946349c7dbdf7d4d1ca7d36a62f_JaffaCakes118

  • Size

    72KB

  • MD5

    cf3b4946349c7dbdf7d4d1ca7d36a62f

  • SHA1

    b53c4656fbb7f99ae06e81fe96fe77106fb907a7

  • SHA256

    0934681bd76af72f7ac2ed12899f76b6cd17ec5e50f8adf3b81523774b305cf7

  • SHA512

    f043b80e901b05092a53f83db94a41ade60a9034f08344588ed330b9b571850804bf1692107dfc746745fb9ff9abd163d2839f1212c5c5d8d2891a99f9a62bc9

  • SSDEEP

    1536:Ipsgpb6bipXNy8/7eyeaYoDaWUOMb+KR0Nc8QsJq39:d+WiBN3/dYoDnUOe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

18.188.148.190:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf3b4946349c7dbdf7d4d1ca7d36a62f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections