General

  • Target

    056211cb79fa2a465c5fae2a99eb534e_JaffaCakes118

  • Size

    329KB

  • MD5

    056211cb79fa2a465c5fae2a99eb534e

  • SHA1

    335803788cb9df1f48cacc015d75153ffc3983fe

  • SHA256

    4093314d3be7bb268e804aa000f7031686be76c23ecb5e45f43ffaf7a78f04f3

  • SHA512

    c2a7f3d5a49a104b60b8c8f9924fbb6481e9a845b2207632f66a1dab04b8c09ccb1e4264fbf9c9516f93beb3535133962a8e09755b6651194e670a6c815d8b4f

  • SSDEEP

    3072:Eg7ZsK55aAZgvo4otYTzKEJreJqvMS+CxdAPzuuhQybawM2VfguBKe7OARl6eIc6:EIF5Q7CIJNh7P/ALB9vfgfy67c2v

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 056211cb79fa2a465c5fae2a99eb534e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections