Overview

overview

10

Static

static

10

3bc4c85b35...18.exe

windows7-x64

10

3bc4c85b35...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bc4c85b35d349c980df5bcf40e4316b_JaffaCakes118

  • Size

    72KB

  • MD5

    3bc4c85b35d349c980df5bcf40e4316b

  • SHA1

    90d8c7e56cb0fb5c0131f1d7bec646b5ef046f0d

  • SHA256

    9af27d669e7219f7bd9830e232ef1a546fc8d6b67fee0d4c94875ca2c67c596c

  • SHA512

    f2a2b466244e1fcfc7c533e6f01aebdaa9cb7cf2a9b379a0de89fb1690d890f8489dd9bd7b4c234255d16df2f0dd1ede3894b1b0c8b61ddd48302e996387b3e1

  • SSDEEP

    1536:IbOgSOvqFxnIe5TMUhhAk/3TYMb+KR0Nc8QsJq39:cSOmx/ZMCEe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.12.154:1234

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bc4c85b35d349c980df5bcf40e4316b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections