Overview

overview

10

Static

static

10

fc6128d9a4...18.exe

windows7-x64

10

fc6128d9a4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc6128d9a4e62bc901624f54abf54667_JaffaCakes118

  • Size

    19KB

  • MD5

    fc6128d9a4e62bc901624f54abf54667

  • SHA1

    34fb9bbc59d7321ce7d1aac627362147fba5b2a0

  • SHA256

    0634209be39c1949373b4da6eb9d242cd72da309762b3073f65632de4b57b717

  • SHA512

    b4facb2818701558b4daed6a96ab32dbc5f166f29d62625ccd37f3230a9dc0db23e967b70f11f7f7c0a10714b21b600db5a8dcd6e37dafedba09e37905c994ef

  • SSDEEP

    384:xCWjgay9IAEjZDeE4t1cIAxbE9lY4a0kHhU2iY6u6VcAXY:kay9IA8ZDj4IiHa

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.41:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fc6128d9a4e62bc901624f54abf54667_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8b58a51c1fff9c4a944265c1fe0fab74


    Headers

    Imports

    Sections