Overview

overview

10

Static

static

10

fa3d0ac17f...18.dll

windows7-x64

10

fa3d0ac17f...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa3d0ac17f308e88d9f2291749790461_JaffaCakes118

  • Size

    5KB

  • MD5

    fa3d0ac17f308e88d9f2291749790461

  • SHA1

    e5f9412b346b3fe42390c34bc0aa44394446ca05

  • SHA256

    77793c58346aa552baef144439e29876a8b78c12ef6964699bad63448c2a4efe

  • SHA512

    feab0b362d13745371e87c41bcdbd2008b8a6ed2068aec45c10549e5fdbea64159fe8200ef7b4451c1dd07c05b4a2db659003fc2d59344465e27c72a3e59eec9

  • SSDEEP

    48:6e3oxJYVORUF4RbIr5knJPlvuLB114/WTJkio9:hcRUSf4p4eVto

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.244.131:12345

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fa3d0ac17f308e88d9f2291749790461_JaffaCakes118
    .dll windows:1 windows x86 arch:x86

    dd3e4671a94e5f863a9ffca69e764e25


    Headers

    Imports

    Exports

    Sections