Overview

overview

10

Static

static

10

136b0d5139...18.exe

windows7-x64

10

136b0d5139...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    136b0d513954b30bc244976c909dce40_JaffaCakes118

  • Size

    72KB

  • MD5

    136b0d513954b30bc244976c909dce40

  • SHA1

    885000f60b08cd457f74b9bf89a2dafa544ceebe

  • SHA256

    2557fadbe3cc9190a4bee15c1fa99b81feba068c8595c9ed5af87e57e70d2d02

  • SHA512

    784a5d6945edde9c39c68184d011a810e4f24467d2c461825047a73e2cf895d8759fcdc2cef82bb0ce344c7f872a737d6181d34ceb17a89aee0b156ec1da8cf4

  • SSDEEP

    1536:Igllx+V86gm/vr/DyFynMqrJZMKkSTBLDStsrb9Mb+KR0Nc8QsJq39:tx88gDuynRrpBCIe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.116.131:7744

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 136b0d513954b30bc244976c909dce40_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections