Overview

overview

10

Static

static

10

02000b5558...18.exe

windows7-x64

02000b5558...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    02000b5558923c8ddb3fdd5c3436d1ae_JaffaCakes118

  • Size

    1.0MB

  • MD5

    02000b5558923c8ddb3fdd5c3436d1ae

  • SHA1

    2e2cc9dcc3269c856ff689ecec048bca77bd38db

  • SHA256

    e2a06bbb4883de4a5461ef87ddda2470c58755fbb8c3ac621b0a7e7f129a05df

  • SHA512

    c6dd9e26ac88f296e695d38b991d4a9c4f7a13881ffd7973a4739506cd97acea087a0e9e9cec52d9ea66cf5b88cc3cbbf197e264ca7be517d550f8ee36ac8598

  • SSDEEP

    24576:WUgceb5PJ/t7o/10QlRwc27Rypi48IGbhNmr3I2RIZOHv:WNnj/h017Wc21y04DGFNmr3IsIZE

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.100:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02000b5558923c8ddb3fdd5c3436d1ae_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    fe29ac61823c9ee660c3217c8fd85d92


    Headers

    Imports

    Sections