Overview

overview

10

Static

static

10

e79c3bed02...18.exe

windows7-x64

10

e79c3bed02...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e79c3bed02752c36bba603119884e640_JaffaCakes118

  • Size

    72KB

  • MD5

    e79c3bed02752c36bba603119884e640

  • SHA1

    bb2be28888974d504caec04ba1056e9562596341

  • SHA256

    4a2785fee0331479b225af581178537354ddea0c752b5a017e97625b8e9e4926

  • SHA512

    d6c868bdcbabeb328e171f4e07c4d77da5b8543338e7b18c3db0f3c236de45f3aa62dfdc10c58a4e3ef0704572b267d54cd9af85f854e340956f0c0ac210ecd5

  • SSDEEP

    1536:IEQ0M58L+RauWLZTDZc1TvAuKMb+KR0Nc8QsJq39:I06lox8D1Ke0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

89.134.163.236:18003

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e79c3bed02752c36bba603119884e640_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections