Overview

overview

10

Static

static

10

26d932791b...18.exe

windows7-x64

10

26d932791b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    26d932791b6727f45ac9cf6967355c54_JaffaCakes118

  • Size

    72KB

  • MD5

    26d932791b6727f45ac9cf6967355c54

  • SHA1

    5ef009de34f886216feac44f445b003bc921e979

  • SHA256

    b139d0f5b4319fe5466858dd261521f2f1b5cea5a0b7573c2f45b7da03314d71

  • SHA512

    7380d0b7fed61c5d01b302631b40ae220ed20e5c957958b5c8c64995679bae698aebbe7f7dd19eb10b3697d2762412d72229d7f47b87b408cf68bf45710c1143

  • SSDEEP

    1536:IpuAxqpBTz0ZY6LExAzrD7U5Mb+KR0Nc8QsJq39:ELqPTz0ZY6QxA3DY5e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

139.182.181.69:666

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 26d932791b6727f45ac9cf6967355c54_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections