Overview

overview

10

Static

static

10

db5874f4cf...18.exe

windows7-x64

10

db5874f4cf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    db5874f4cf720e30dd12f63bbe04fc46_JaffaCakes118

  • Size

    72KB

  • MD5

    db5874f4cf720e30dd12f63bbe04fc46

  • SHA1

    6f5f5f0a46111ddedfd61a9cebbe63edbabc8569

  • SHA256

    aa63024fd3d307cd0bcbe014baa98116937a09ad9cc2c754eb6b5fdd9f97210b

  • SHA512

    52e006e778a6f2aec94e24458982f25d552c3169eea39e6862b728fccda75fed4c17b84ab17c2944617929cb21c407e26374b3ce8abca0ea50ce0ce4b1621ad1

  • SSDEEP

    1536:IqS2OaH8FcMx5kNQwiJFqTD2c6Mb+KR0Nc8Qs:DS8cc7iaTGe0Nc8Qs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

46.116.148.54:9999

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db5874f4cf720e30dd12f63bbe04fc46_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections