General
-
Target
f600dea87bf0709ebf4162b94bed35dd_JaffaCakes118
-
Size
123KB
-
MD5
f600dea87bf0709ebf4162b94bed35dd
-
SHA1
dcc05693aec3bb6b257be2422072e4149af75e24
-
SHA256
590d78ff7ab35052737adf5f94819b31cd4ef9af89112ece5e59b76d99292e14
-
SHA512
dc5f1c57ee495e05c3bee2b66eecb465ccefc454f089ffe8505af1a13df6a3a727fbc68a33b2068b8a08bf0d41bd9512857425b1ed32a738b175437a6a4b7383
-
SSDEEP
3072:9b9Sb1K9HK4CTbdcsvFWj+eDafue7o0qQk0BVkY3Poutu:95SbwRK4CTbd9W7Dan7o0TBVkEPoS
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
encoder/shikata_ga_nai
Extracted
Family
metasploit
Version
windows/shell_reverse_tcp
C2
186.87.71.200:8081
Signatures
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f600dea87bf0709ebf4162b94bed35dd_JaffaCakes118
Headers
Sections