Overview

overview

10

Static

static

10

5553b8a214...18.exe

windows7-x64

10

5553b8a214...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5553b8a2143b1f9fc77abf5cde92718f_JaffaCakes118

  • Size

    72KB

  • MD5

    5553b8a2143b1f9fc77abf5cde92718f

  • SHA1

    dfb92bb9f947a095b2b87c26665b2e11c2162393

  • SHA256

    74821433d29601ef145473f863426a063e6bbc5e3772ac960bf209d685f0ee90

  • SHA512

    9c300fef7b91e73802e808afcfee16d8c5ff67a2ac5e43880d2b835bf21bcfdc29e2a4081cf245fcacea0a1e7896b4917a9e9ea269a8dcea8fd6e2005d4934b9

  • SSDEEP

    1536:IzdVBqeAjazxSacZ0qy85VMb+KR0Nc8QsJq39:wnIjswaU1e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.210.11:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5553b8a2143b1f9fc77abf5cde92718f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections