Overview

overview

10

Static

static

10

d60f28c541...18.exe

windows7-x64

d60f28c541...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    d60f28c5414bebaaa358d14dd79bf8b3_JaffaCakes118

  • Size

    192KB

  • MD5

    d60f28c5414bebaaa358d14dd79bf8b3

  • SHA1

    a6abf0a769c0f74b487d26db7964e06dbe6a4280

  • SHA256

    3d6ff7fa98a376f7674b9975daca012278683f6cecf22126ca9d7b75e862e4ba

  • SHA512

    f469575e89b2b46937d37eb49c888e61494437020a62163c13e2c215773558d29f5d8bd7c757a32e2c6c24adb152665b037155d033eb0a4d2a40531e3183712a

  • SSDEEP

    3072:JOrerAgXWMI6vKoTN6p0frxJLgf7nDVF6PUp1Yo3ICgx:JWDcRgNpex5gfzDVlVXg

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.10:5555

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d60f28c5414bebaaa358d14dd79bf8b3_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections