Overview

overview

10

Static

static

10

e5ed5e1b10...18.exe

windows7-x64

10

e5ed5e1b10...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5ed5e1b1013ec74093a117e73fcf566_JaffaCakes118

  • Size

    112KB

  • MD5

    e5ed5e1b1013ec74093a117e73fcf566

  • SHA1

    db3e16f280e901aaf8882bd52c5184e52d0db7b7

  • SHA256

    1a9f8fa8e465941dbc7074455c778759035f89c8a76912dbe8366fc1376d147e

  • SHA512

    03f374ab263b696ef4e03f31fa3e607447c74b4a6b524b8c5e7d2ae274b1b86a1804b0f1accc35cff641ce7a80d705f17912089746a1f9fa8c69201b7282381b

  • SSDEEP

    1536:8lu2Hz3kp4h1TgBvHL0qiu3v8zQFRgCyNoPvLV6eBsCXKc:8luE4xiu/8cbgCWoXL1BsC

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.7:33333

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5ed5e1b1013ec74093a117e73fcf566_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    08f6a1b121da8cedde2d1089d0906ed8


    Headers

    Imports

    Sections