Overview

overview

10

Static

static

10

8c8a1dc7be...18.exe

windows7-x64

8c8a1dc7be...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c8a1dc7be6b9fece597f581d2aa31eb_JaffaCakes118

  • Size

    72KB

  • MD5

    8c8a1dc7be6b9fece597f581d2aa31eb

  • SHA1

    a37c09169b23f0c4d034ab67f3dc6913e2f5aa52

  • SHA256

    7250273492ed6897255b73c08f57a892c6447269a0ad2fe91f85ba746a031c8d

  • SHA512

    f952e94c3ae84d0a843386acd0a92821e00dec829487b697e6b947ea558647c25a3cc14a2a4d3165dccba203c34fba62c9318b09b77437b13a031c26241752ee

  • SSDEEP

    1536:IGoZUD66fDrLQyd5Hibzy6ewOpI+Mb+KR0Nc8QsJq39:OZUDtLvZOeB++e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.117.130:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c8a1dc7be6b9fece597f581d2aa31eb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections