Overview

overview

10

Static

static

10

fedc012a92...18.exe

windows7-x64

10

fedc012a92...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fedc012a9253bb1996dcec8020cfaf09_JaffaCakes118

  • Size

    72KB

  • MD5

    fedc012a9253bb1996dcec8020cfaf09

  • SHA1

    5d15d8bc2c083ef9844672bc4192d33c95ee8b11

  • SHA256

    cfd59670d783679e3a56c744f6d51969aecf1db9e1cc49f9ea05c8dad3ebecd7

  • SHA512

    82085faeff9a8e4882234a71664269cf566190728ae7b9b8c113f3975ef0f0ec7fc20a28d8ffb9bdc150f024966b0b8fded007561cd7f66a220af7ab5af4bc3f

  • SSDEEP

    1536:I4kKpSX9lK2rHVfKeYlQzEMEQMb+KR0Nc8QsJq39:vOHKW1k5LQe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

46.240.79.207:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fedc012a9253bb1996dcec8020cfaf09_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections