Overview

overview

10

Static

static

10

d01366179c...18.exe

windows7-x64

10

d01366179c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d01366179c9522c25a81dee1eb11cb7e_JaffaCakes118

  • Size

    4KB

  • MD5

    d01366179c9522c25a81dee1eb11cb7e

  • SHA1

    5f206e2fded99636d944ee19119d4f53232ad82f

  • SHA256

    ef07ee80ddf41773ed87615fe9bf868f4c28fd0f85a216cb7103e86b3b91959e

  • SHA512

    75c4564a77b77963a17147ba9e3f2248b2b71d39b54413b6d9970bb4e2b491414fe164d1508ff0c36273b35dd7911c1a68a47d98f483ba1375f7709993c006b1

  • SSDEEP

    48:6kirMcKzFHC7G+9oqYrt4JOMWxFIeucq+AKKML9HKZrgQWAtPigcajR47iQJZBp:lcK87GM3YCXWxFIABAmxH4yAtjcasfZ7

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.55:3333

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d01366179c9522c25a81dee1eb11cb7e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f9ade0aa18f660a34a4fa23392e21838


    Headers

    Imports

    Sections