Overview

overview

10

Static

static

10

175acd29bd...18.exe

windows7-x64

10

175acd29bd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    175acd29bd37eec49730d5449ba1414a_JaffaCakes118

  • Size

    72KB

  • MD5

    175acd29bd37eec49730d5449ba1414a

  • SHA1

    68e1e2efbd531e5f41f03345471ccf99ca6a81a5

  • SHA256

    db497e475c3808cc73fb2baf5a0b839b35b447afef1acce5fbc1cc1695543d51

  • SHA512

    50b283cfe0e9237b9ff79e44b72e8b2825a0c5ee13a7517ae67dca6c722f9a99d1fdce4d8d68fe90b1966fe17925ffaf73e89f54bbac71713f350574b20893d1

  • SSDEEP

    1536:IMBEnauR5gKwBFe5rgDuMb+KR0Nc8QsJq39:lKasgZssye0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

41.230.33.25:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 175acd29bd37eec49730d5449ba1414a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections