Overview

overview

10

Static

static

10

edc38c6079...18.exe

windows7-x64

10

edc38c6079...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edc38c6079f6d8e6fcdf8b1db84df191_JaffaCakes118

  • Size

    72KB

  • MD5

    edc38c6079f6d8e6fcdf8b1db84df191

  • SHA1

    889075017484abdfd4aadb76ec2c5d1c290c9b4d

  • SHA256

    701282dbf993e93cc5e1cfcb59ac9c66520d34aa2954fd499ad2f39b242bbaa4

  • SHA512

    00c6b943a98d70d0ba9bdda41e4eab3cd088dacd067779c9adc2d8eadb0f27468f20836e2392caf31391fb1efb932e5b9c20fad4a3418e347f9c3653135fa7a6

  • SSDEEP

    1536:IanSRr8rAhwmP6ugmTCLgckn//Ha0KIa3zApBhMb+KR0Nc8QsJq39:hnSOrAhwzuZCcX3Ha5Ia3+e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.66.184:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • edc38c6079f6d8e6fcdf8b1db84df191_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections