Overview

overview

10

Static

static

10

aad40fa7ba...18.dll

windows7-x64

10

aad40fa7ba...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aad40fa7ba4a04bf786db011780df4e8_JaffaCakes118

  • Size

    14KB

  • MD5

    aad40fa7ba4a04bf786db011780df4e8

  • SHA1

    7f76fd47b74f8afbe800d6aa84b8873aaff87181

  • SHA256

    8c6eab0b1163cbc7248147140aeedfcb087c2ba32f0bbfe2f5f3b1ea3324faf1

  • SHA512

    8ef4f2a77637652cdc1ba6666d57cc728e10ac702235cd5ecb6bd7683e76035d2de31dc3b4e9d81dbcc530db2a4e6eb02c6df7f7783878e5d267b39c3e50c408

  • SSDEEP

    48:6D640H+VzPiZerMpZytjWeyLhnhIAsYBlnfcpKq/hHeq0JEI0oqtIzNi:WmHGzq6tjW33XlfCJhsJNcy

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp_allports

C2

192.168.1.116:30000

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aad40fa7ba4a04bf786db011780df4e8_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    0b7b4c8fba119fc8ba64403e1ce2bcf1


    Headers

    Imports

    Exports

    Sections