Overview

overview

10

Static

static

10

97819cbddf...18.exe

windows7-x64

10

97819cbddf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97819cbddf6967e6663b2e3c9b8fb6bd_JaffaCakes118

  • Size

    72KB

  • MD5

    97819cbddf6967e6663b2e3c9b8fb6bd

  • SHA1

    8df2dec9bbc2d50a2296bf64e3349c3dc5f7e107

  • SHA256

    b1b8f63bba5cdcc96b8edeb2aa0aea0b393da19f53b1a7ca2389db9f6ff304ac

  • SHA512

    5e91e5d1ec3970eb065ca8948fc802470cb56947d5dadd88fc22aaa0aab79f61e1b5a5b1ac6abb4ab0ed53f93d629cdd363a7fd076033a2541deaf971a6f086a

  • SSDEEP

    1536:I5n5v32i/hEoaDwVukTIXJlbHI9BR/LoMb+KR0Nc8QsJq39:UYmhWkTU7mV8e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.104:4321

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 97819cbddf6967e6663b2e3c9b8fb6bd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections