Overview

overview

10

Static

static

10

0ec519f02a...18.exe

windows7-x64

10

0ec519f02a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ec519f02a7c13918caae24c24fbbb08_JaffaCakes118

  • Size

    72KB

  • MD5

    0ec519f02a7c13918caae24c24fbbb08

  • SHA1

    d7b013386d9d9b8941435be9099f5eb909041a31

  • SHA256

    aa77fd2d06eeebbc4a58207de27c8187095447d69cf6530c3bf3610cde874f09

  • SHA512

    ff1d7ecbd8715689c87f818d5c047636dc027b4c226f71be17889f55abdb0302af5d0cb7472fa3239fee3d88736dd56f401b86e7eb1b4732e0166d63a02b85fb

  • SSDEEP

    1536:IDQcl+WvK/PyANhnouLswmW7B1xMb+KR0Nc8QsJq39:0QckEK/PLNhou4oBbe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.64:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ec519f02a7c13918caae24c24fbbb08_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections