Overview

overview

10

Static

static

10

dbfe491548...18.exe

windows7-x64

10

dbfe491548...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dbfe49154868635f882d5b81d31b9e8b_JaffaCakes118

  • Size

    112KB

  • MD5

    dbfe49154868635f882d5b81d31b9e8b

  • SHA1

    828e5e821e1a5a8c2840d79b39480693c04bbaab

  • SHA256

    9d37caf90306e5eca4ebb37626c9264e2f21e7d7df779dbaa2da4ea9a9ee32c3

  • SHA512

    8fb2725ff2f9901baa0f7be91a21608e19912a01655492a004ce88f548327fd0ed03a7175049c853d894753ed9f629afe7ff847a8695351afcdcad12705c1ee8

  • SSDEEP

    3072:sUJ9jj7Y4cR2nGwqWADmgxDkToX7BsCRyV:sAjJXBA66yoBRs

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.30.213:7890

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dbfe49154868635f882d5b81d31b9e8b_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    08f6a1b121da8cedde2d1089d0906ed8


    Headers

    Imports

    Sections