Overview

overview

10

Static

static

10

c203198452...18.exe

windows7-x64

1

c203198452...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c203198452d203dcefbfa8a7b1b5daad_JaffaCakes118

  • Size

    60KB

  • MD5

    c203198452d203dcefbfa8a7b1b5daad

  • SHA1

    57796a531dd1044e5ab96e1c02277060677d4f77

  • SHA256

    b0ab39bffc7f8c8c7342788d12d7fcf09d8841ee06ec4b4217bd741267c7c1a4

  • SHA512

    244a9fa0e4f6cb943fa74d41cec31a6bee212490d732881211f8f44bfb2aa432107bc3fa39b275cadc83ba139a0ee5730bcc6944b7b83cd44fb124b8285937ba

  • SSDEEP

    768:SxzbtryjTD0xD3dZHy9msLJXWPxPnJ1BIOrnToIf1ZU+PxnC1w6udvE1:WtKTwxBZS9rdX2J1BIOrnToIffTd0

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

189.163.206.190:5555

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c203198452d203dcefbfa8a7b1b5daad_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    63bc027337968506d190fc50d723bc57


    Headers

    Imports

    Sections