Overview

overview

10

Static

static

10

e61b900edf...18.exe

windows7-x64

10

e61b900edf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e61b900edf71faae6651386821c9c38d_JaffaCakes118

  • Size

    57KB

  • MD5

    e61b900edf71faae6651386821c9c38d

  • SHA1

    0c426a33674cb2f11d9e77ccdf5461800004eec5

  • SHA256

    440a6fe3dce364d067328d92e8437f3ac798ad3b1b00f4d28f685b0a6feaa57a

  • SHA512

    cca520b0b015f9b09e4cdb9f68e2a61dcf732ac6b24829993fdaa8e27474f4e2560af563c4e91e030ec673794012a7929b98ce21d45ef8f22766d2eb7286ee28

  • SSDEEP

    768:sh8GuoRdGwpYnsAL13FVm9zT0E4AaNyvQ4T/DDKcj68oXD5D39cnza0mfs/WHNM0:Qfz6nsAFFDlIJT/nVuDhtcz21HNM6p

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e61b900edf71faae6651386821c9c38d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections