Overview

overview

10

Static

static

10

369614d7c4...18.pdf

windows7-x64

10

369614d7c4...18.pdf

windows10-2004-x64

3

W2.exe

windows7-x64

10

W2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    369614d7c422201f2d1605f4befd452d_JaffaCakes118

  • Size

    70KB

  • MD5

    369614d7c422201f2d1605f4befd452d

  • SHA1

    f963c4f78cf00f6440774b1b6fe992ab03020151

  • SHA256

    e4fa730d00839aaaf4ae00fef4ab0854beccabfeb2541662a5391be85c48375c

  • SHA512

    77c2bf3c2bb27f884f73eab7d69396438e52ce2c16928656128336eaefde46849af9e51d79f69163a4af1b2f7339f2dd85d692946c0fbab8dd142f5f84da8cc9

  • SSDEEP

    1536:KU29hNtvMaKEjiY29XUm3TZo8jTLQBGYsU4CpxpBHZZMTD9:KU2AaK/3TZHLQQmpfO

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

199.73.28.114:4444

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 369614d7c422201f2d1605f4befd452d_JaffaCakes118
    .pdf
  • W2.pdf
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections