Overview

overview

10

Static

static

10

39f63c362a...18.exe

windows7-x64

10

39f63c362a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    39f63c362a819e36ab80f86c92fec55f_JaffaCakes118

  • Size

    72KB

  • MD5

    39f63c362a819e36ab80f86c92fec55f

  • SHA1

    8fb61b321ebff749cfc2b4d6cdb31f68c232fd91

  • SHA256

    6d3c2d157e3678aa9031a2999aafbca5041fb469f271d8b68deba8148b667dc0

  • SHA512

    e154d1d953d6c95f6a6c6f74a47fe44b44689034b24868101623996ab6f1aef3b3d0ba12228273f50cf3a8580fef0d773dcd12941ba6e993961f82164e0b7ff1

  • SSDEEP

    1536:IcXDeCHG319ZFB2iuHJQXQgYDuL/tiMb+KR0Nc8QsJq39:x1HAFBNXQgYDk1ie0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.52:4455

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39f63c362a819e36ab80f86c92fec55f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections