Overview

overview

10

Static

static

10

d3850812df...18.exe

windows7-x64

10

d3850812df...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3850812dff7b02eca5d82df55a4e1ed_JaffaCakes118

  • Size

    72KB

  • MD5

    d3850812dff7b02eca5d82df55a4e1ed

  • SHA1

    f2f37f0f96c3b6e94c1d6b2dd1926e45c118c90a

  • SHA256

    1681ee55cfb2bc3324c19e4cb044300feb96fa74a5fc28abeadb5c4d6d3feb8f

  • SHA512

    557274f87c44a267b443d764c7ca914a022139b2a48b602b6135ea44811a926b879ca0c0ea82165da5e1de777f4e7dc552a3b96b6c1117af7fe1637e7465b179

  • SSDEEP

    1536:IpyPJ6IrDMyqdAI2o9puDNLAvSP9EMb+KR0Nc8Qs:jPgI/rqaPoOqqPOe0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

146.231.123.54:31337

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d3850812dff7b02eca5d82df55a4e1ed_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections