Overview

overview

10

Static

static

10

d233624ecf...18.exe

windows7-x64

10

d233624ecf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d233624ecf510e125e21ddf5839f563f_JaffaCakes118

  • Size

    116KB

  • MD5

    d233624ecf510e125e21ddf5839f563f

  • SHA1

    65b3e9a7d5387c2f470e55226cabcec8cecdd1b9

  • SHA256

    f949aae8875a8ddaf10121719674e9e2f8c77984e25f263a2b093919a64f9be9

  • SHA512

    8af7e205fa25badb04eb2de3c3fddf31bcd235f0e356836c220c9bdd8875b950f3a042f90744c8f3e4f762c12f60afcd29f1226a336ce56a00fd8147f22c9c49

  • SSDEEP

    1536:QxPsUnUlCsZwCaFS7vR8TfSpq0oxE9oP90FKbzSuzVtsl:QWdUsZ4Y7vR8TMqS5uSotsl

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

120.50.32.50:50

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d233624ecf510e125e21ddf5839f563f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    496d6bb079f7bb39bb20f69e831e2485


    Headers

    Imports

    Sections