Overview

overview

10

Static

static

10

98e86e2436...18.exe

windows7-x64

10

98e86e2436...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98e86e243648eeeeaeed827a2bf25076_JaffaCakes118

  • Size

    92KB

  • MD5

    98e86e243648eeeeaeed827a2bf25076

  • SHA1

    b4f346140f817195e0685520368d0ec3e2cfed49

  • SHA256

    0a33f77ae808e7c63ca69da7a03f8a6bbb1dd14081f3e9aa161fb3dc2257c59e

  • SHA512

    4358db09b84b640aafe1992beb04f7632a88f33f5c89144ac6921b711e1fb9e14dc56fab6b3a2939a820e926c6db0e65697404a285bf35634eb66cf0f7d67474

  • SSDEEP

    1536:v9SEmt1mADaUvwjkivyEs7TaAmeB2MBOCLOE5ephMV14y3aa0oIRaHc6n:v98LxmUKFs/Nm01GQOMV133axow+Tn

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.5:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 98e86e243648eeeeaeed827a2bf25076_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d1c393fa6d32059b12042942bba53193


    Headers

    Imports

    Sections