Overview

overview

10

Static

static

10

a800cb0236...18.exe

windows7-x64

10

a800cb0236...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a800cb0236f7e0e55bee8f53bfa7cc86_JaffaCakes118

  • Size

    84KB

  • MD5

    a800cb0236f7e0e55bee8f53bfa7cc86

  • SHA1

    5359b202d688448fb00468facd4800d0f88ed1e4

  • SHA256

    bc7efb1740cc640cf010a9960e82c54348c3089c292e70aeea1b6e6beab0e268

  • SHA512

    5bd85768b32cb7bfe2d6c1af79ab7d92162f364599d51e7f6223168f4c68f34b7f565257d202dc1e86bcaa2fe17febf1bbbc158718d82aa54ede65fa918019ef

  • SSDEEP

    1536:WN/Kig259b1o2IBi432HJvT0sH9PWitYd1jiASaA5scDsrR2:uKw9b1KBi43QvT0wPWiGh3SaFF2

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.206.164:777

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a800cb0236f7e0e55bee8f53bfa7cc86_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    aae33ab4a310f18dc58a55b2fb1857a0


    Headers

    Imports

    Sections