Overview

overview

10

Static

static

10

386a303423...18.exe

windows7-x64

10

386a303423...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    386a30342347f5b11dca11af86fc8e72_JaffaCakes118

  • Size

    37KB

  • MD5

    386a30342347f5b11dca11af86fc8e72

  • SHA1

    202163af24961733cb5bb9e9af8281b76ac20ac1

  • SHA256

    dee117ea3a7031dea89469eb5eb3416e8569096e66072ef4df6233f0ef343436

  • SHA512

    677af14ae8058fd8cbe981d996fbf2bf3d7958495c8ec21d43b13766a9608241ab34ee6d5d3b5da3121b18b5bccf917b3957be56483267e72f66b8fc47f33d5d

  • SSDEEP

    768:7VATSMRj2bfCl9H7NO7P50+LTNPMsKpQ6lRZ95x:hVypOzWEJPMXph5x

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

92.102.154.39:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 386a30342347f5b11dca11af86fc8e72_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections