Overview

overview

10

Static

static

10

ea7978bc13...18.exe

windows7-x64

10

ea7978bc13...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea7978bc13c406402f1ce15662aa2744_JaffaCakes118

  • Size

    72KB

  • MD5

    ea7978bc13c406402f1ce15662aa2744

  • SHA1

    1cdc7358864d434682f9f944599d5aab3e7f5adb

  • SHA256

    57b4564b334ae781927222ab3562ee06dfb4e11f76975d84ff7b5a8c6c2bf487

  • SHA512

    cb08d1696a2241f487c682afff0ea85dab27364e434078550dce6b285655cdaff63725a192a98178819e24c9954a5ee855f0d42e0def564ab1ab573fbf03cd0b

  • SSDEEP

    1536:I+T1RvX1lxZoPVLwY3GxFMb+KR0Nc8QsJq39:3HFBodLnGxFe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.10.9:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ea7978bc13c406402f1ce15662aa2744_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections