Overview

overview

10

Static

static

10

2f6d5877f6...18.exe

windows7-x64

10

2f6d5877f6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2f6d5877f6c29f5aa930074bf9d8654b_JaffaCakes118

  • Size

    644KB

  • MD5

    2f6d5877f6c29f5aa930074bf9d8654b

  • SHA1

    cd72a036606f23435a12351ea42d218d26e0c8ca

  • SHA256

    a97cf242d0e72d6059dd5d57fd7185e2275e43ff0b1e7a5cea8b0848b7df7798

  • SHA512

    0368bd70337c451d9c28a7d1c4011280f85a106a6e3ac305d109279e7930acf2904a8f65ac0a40d1a3aba04a15d38f88e4298841202ada1c72fc1773e8db9162

  • SSDEEP

    12288:nsnYq8EsMJz+vELTGQLcXw+vVK+cvq4oD2/Zb6pHD2:sn/fgs9LcXw+vVK+cvqjDiZb6p

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

127.0.0.1:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f6d5877f6c29f5aa930074bf9d8654b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    24791eecf01d8cb909d6a5d99b5116e1


    Headers

    Imports

    Sections