Overview

overview

10

Static

static

10

d321986eca...18.exe

windows7-x64

10

d321986eca...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d321986ecadc33dc7d771695394fcabe_JaffaCakes118

  • Size

    72KB

  • MD5

    d321986ecadc33dc7d771695394fcabe

  • SHA1

    49a8dbab601c62785bf5fe7286a95a5bbe2e9ad9

  • SHA256

    331a4e93f88d3be2af73795f3e4305f5d79b8df620db71dfe74708e9082fada6

  • SHA512

    bc9982fd5b6b3374225a5768c0c24eead60447d8ce3f14d7ef98833da90df1ed4825571b4a7f689d6aa29fc865b33dc21d753b519778df0f5622e14adb111ad6

  • SSDEEP

    1536:ImR0Do+xJFb3tIUfPfbYx6WaGxl3Mb+KR0Nc8QsJq39:HGMwb9I4PDYx6Ae0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://172.16.10.1:1234/AoJcB

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d321986ecadc33dc7d771695394fcabe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections