Overview

overview

10

Static

static

10

fd0601419d...18.exe

windows7-x64

fd0601419d...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd0601419d4bd825025715b4f636f987_JaffaCakes118

  • Size

    20KB

  • MD5

    fd0601419d4bd825025715b4f636f987

  • SHA1

    728ff9546a44131cb210cfa0a49db630771d5f80

  • SHA256

    327fd0167c1cfdef5aa4a39578c73d98b2847b5075bda17b417056dc2aec89ad

  • SHA512

    c674851ee27bf14107fa2b8006d17fc0453d634d221c3c3c27639bdf4b1c5312e6519fbb637a301ea514d0e77690fc43f29b1b3f66300e804ca3fbfd6270898c

  • SSDEEP

    96:DxmkDiMlCv45kDphvCkEPaBdkDmQbHplOYnpMiuygqHy1YH0jWzpV+lpKC7tlZIt:tmTcCiehqraXWmZAy1CUWb6pl

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

127.0.0.1:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd0601419d4bd825025715b4f636f987_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    369087d6e2e4085b5f6676dfdc368558


    Headers

    Imports

    Sections