Overview

overview

10

Static

static

10

fa4a579772...18.exe

windows7-x64

10

fa4a579772...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa4a579772edd7fdfa3f3027e0de6229_JaffaCakes118

  • Size

    72KB

  • MD5

    fa4a579772edd7fdfa3f3027e0de6229

  • SHA1

    7ebba9247c08a8dde53bb8ff3bd94fe53c7af679

  • SHA256

    aa24f4108c8a68ce1815e929545696cd8e7034815a93038ef6fdd12fa00ee8b6

  • SHA512

    0d7986696565c0ff732bf5e7705a49f0d780f622b14653df8c1af07898e10797fb9d8dcb3c948294a5127bc7b6da8f2f4fee6b0681151ac6f09f4d9f73b3d7f1

  • SSDEEP

    1536:IYqLUoRTVm0epaCTyyDt9jw59HwFoBvAMb+KR0Nc8QsJq39:47RTVmZYcymjUH5Ye0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

178.148.17.182:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fa4a579772edd7fdfa3f3027e0de6229_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections