Overview

overview

10

Static

static

10

f180966ee5...18.pdf

windows7-x64

3

f180966ee5...18.pdf

windows10-2004-x64

3

Linux-auf-...tt.exe

windows7-x64

10

Linux-auf-...tt.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f180966ee524d9f0c1e34116415892bf_JaffaCakes118

  • Size

    178KB

  • MD5

    f180966ee524d9f0c1e34116415892bf

  • SHA1

    ec6e93a7fc60097cd3ced113713a81d6f69bd854

  • SHA256

    d4f68695285e2f4f3c6565d805a0f89b5301787b6893890c9e0b85617fbc3b14

  • SHA512

    964525b1bb4ab19515b88a825e1616879e74b61d73cf91aaa26d9db9c0c61d273f3963611e1c346c4d8c8f02eb1979608fa79e1198c2ecbdc1de824c740d23ba

  • SSDEEP

    3072:LCBdugFUDfVCX1XG7sJEYScFBEcU0zByD9o9GomZ1FFWU2aZPRpyIYVUoZJqsZz:2nRFUDVc1QsJEFcFtzBGo4omZ552yg5

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/exec

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f180966ee524d9f0c1e34116415892bf_JaffaCakes118
    .pdf
  • Linux-auf-einem-Blatt.pdf
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections