Overview

overview

10

Static

static

10

f1d35cf010...18.exe

windows7-x64

10

f1d35cf010...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1d35cf0109e30380bd955fc3fa520b9_JaffaCakes118

  • Size

    72KB

  • MD5

    f1d35cf0109e30380bd955fc3fa520b9

  • SHA1

    a19af96ab58e4d4858a84cac847f6c73dd4bda5f

  • SHA256

    f1fb1413a53400a346b75cabe0ae368c66af00081b9a52a53e731cf3c87fc6d0

  • SHA512

    4f1fca7b44226b079890cbad8f605acdf8df34756a30d7ee05e25229e1612c7d2002324e44cdcfa92bfe97ed27e62087e40a3be9d1aae0b7cbd1470dc9efd41d

  • SSDEEP

    1536:I1Zyon2oPVPDQnCVc2YVJphuxS7Mb+KR0Nc8QsJq39:+nVJDXVf8JpSS7e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

2.225.14.113:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f1d35cf0109e30380bd955fc3fa520b9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections