Overview

overview

10

Static

static

10

042925a1af...18.exe

windows7-x64

10

042925a1af...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    042925a1afb978f1f52224c75f03fd76_JaffaCakes118

  • Size

    197KB

  • MD5

    042925a1afb978f1f52224c75f03fd76

  • SHA1

    f631a63572b0628d7108ea16712f373c5d3f25c1

  • SHA256

    27459dcf8b5f8db53dc1d6c3ae39503a70f80c744107f5f5444223bc11c36d3c

  • SHA512

    fb099619c1951d8153ef546abcf22745c050518f544501febba4bd0d50df219a3ac5edcc34f0d9a20cdd2112c4b0aa9009aad8f2a886634f20062f92f27d42c2

  • SSDEEP

    3072:t6LOKpt/qmUndzx+mQ1hpPvcsuqifJNg0kcq8xi6UiRh57Nz:ybqmUndx+11hpPvMxNg0kcpwiN

Score
10/10
upxmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://121.4.41.2:80/Isl4

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; XBLWP7; ZuneWP7)

Signatures

  • Metasploit family
    metasploit
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 042925a1afb978f1f52224c75f03fd76_JaffaCakes118
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections