Overview

overview

10

Static

static

10

dc467f8392...18.exe

windows7-x64

10

dc467f8392...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc467f839292142855c448f6c56e631a_JaffaCakes118

  • Size

    72KB

  • MD5

    dc467f839292142855c448f6c56e631a

  • SHA1

    43adca1aa5d96cbbc479bba807a86e1ba8c5ca21

  • SHA256

    4ca3a0697bbdf2d886b0146492e90f2b3d1bd5d9572e6176f705e3a54be53bf9

  • SHA512

    a65ab5e17fd6d9ecea692a045ae9259285028768b2ab6af9de413e3935d4ef288f9abf443636a78d1ce68b93bc779b34b6e0b83c73a00c30bbc1d11a8ebb3617

  • SSDEEP

    1536:I2ZLRCptme745rcoMu0pMb+KR0Nc8QsJq39:TZdECpX0pe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.0.0.3:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc467f839292142855c448f6c56e631a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections