Overview

overview

10

Static

static

10

4504bf6d44...18.exe

windows7-x64

10

4504bf6d44...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4504bf6d44fc4f9be908fddb35985b78_JaffaCakes118

  • Size

    72KB

  • MD5

    4504bf6d44fc4f9be908fddb35985b78

  • SHA1

    3eb4d678ce3de1782af59ed553b7eb57338eb273

  • SHA256

    b7c0b45223cd23e831c840724815f16a6ad500e97635ef7b1a890d16158bb0e9

  • SHA512

    2af24e8acf6908869166c654b3f55cc3bea5f35170da93d1e4bda0cf9adf73c8fd93d4ff2e90cca08dc3f46b265e0f18badb691b8f07647cab3e752cd49ca1ad

  • SSDEEP

    1536:pLlacbdTqzqXRz8SHuU33xyzz9/imhl3pMb+KR0Nc8QsJq39:t44lhz8X5hhpe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

82.155.132.186:5555

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4504bf6d44fc4f9be908fddb35985b78_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections