General

  • Target

    176057a4d0bda3aa6bb48e0e226875a4_JaffaCakes118

  • Size

    81KB

  • MD5

    176057a4d0bda3aa6bb48e0e226875a4

  • SHA1

    00ea8a952eaf5f79b3f7b860561a270aea17d110

  • SHA256

    a740d3237fe7ed5d5e30d100c05c0dfe1bbc0664fd031d224d03335ff41bc740

  • SHA512

    8ac9d152bb0a28bddcbe48169803a4b2d18d2dac24d892088851de9beb209c020889ab1c38c403d62f46cf9ef61de8fffc8665b58a9039aee6d76e0685c415a2

  • SSDEEP

    1536:BQpqjSFBzbGhf/9p9J1YmvlHOo1dm8ymyuIlQcURjD:5OF4N/CmvlFHmYyDZUR

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 176057a4d0bda3aa6bb48e0e226875a4_JaffaCakes118
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections