Overview

overview

10

Static

static

10

252e36089d...18.exe

windows7-x64

10

252e36089d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    252e36089dfba02edf1a39d8be23d22a_JaffaCakes118

  • Size

    72KB

  • MD5

    252e36089dfba02edf1a39d8be23d22a

  • SHA1

    4a42b694bb09880cd19ec275f46ce1fa765f91c4

  • SHA256

    e9fc806183e38bd37df17303d31bc3e43db85995f637b037b371b9f9de4095a0

  • SHA512

    9445d1f67287558ec7f9f1b2b694a4ec48350808b97bf1ac29af65064d31d97c33a17fa88f76529d47f15d996927aae0721a5588147a63215ba838c1b46f6898

  • SSDEEP

    1536:IntYar6lE5rSr6lVza8UgO91+QNsQmOeUcHqUuMb+KR0Nc8QsJq39:4t5rSr6lRa8xOShiGDue0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.113:31337

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 252e36089dfba02edf1a39d8be23d22a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections