Overview

overview

10

Static

static

10

dda7219821...18.exe

windows7-x64

10

dda7219821...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dda72198212a35c367acdeb3cac8cd75_JaffaCakes118

  • Size

    72KB

  • MD5

    dda72198212a35c367acdeb3cac8cd75

  • SHA1

    105c6bfa06aca4d1603a3d0f2c9341ca4094b393

  • SHA256

    4008c59663fbae93e560ce8f2a906ca88d034310ab968338aa8a8fcd4fd2f512

  • SHA512

    e08341732ada5cca7bc9e657212293f0ed26343ffea9cd628529e28d883b462d52894af9a0dacf55d72211a6b41524b4c3b93ec8b54b39a731684fdb65188829

  • SSDEEP

    1536:IW3gybeGTSTghY2DXSiwwyGhDgUMb+KR0Nc8QsJq39:Ewe41DI8gUe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.1:4455

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dda72198212a35c367acdeb3cac8cd75_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections