Overview

overview

10

Static

static

10

e8c75b6c47...18.exe

windows7-x64

1

e8c75b6c47...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8c75b6c474fd318d44681654f60fea1_JaffaCakes118

  • Size

    197KB

  • MD5

    e8c75b6c474fd318d44681654f60fea1

  • SHA1

    cc460c0bcd3b3429a5330636af7c9f7d833c2f8c

  • SHA256

    3acb281722a51db3b92ed03e520532e73b37d22cddf107d7037f4f36ede891cf

  • SHA512

    dbf3634456c1bb44f7ce9a2c2e1c110d0d4f652166771de718654f3fe5bcc310d5610f398887491845d298052e685db7a405ed3d8d88abca67bb01076b93e2cf

  • SSDEEP

    3072:J6R8qRJ0J/k25fmzraJuZQwaHzZw/Ivk45Ym4/R3I:JMJ0J/LmzraJuZQwaxvk45YPR3I

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

59.10.122.212:9050

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e8c75b6c474fd318d44681654f60fea1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8b58a51c1fff9c4a944265c1fe0fab74


    Headers

    Imports

    Sections