Overview

overview

10

Static

static

10

d12e0f7932...18.exe

windows7-x64

10

d12e0f7932...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d12e0f793229d0750fcc6e583c88b97a_JaffaCakes118

  • Size

    99KB

  • MD5

    d12e0f793229d0750fcc6e583c88b97a

  • SHA1

    c67f59e02ee7ad71abc42b630fd0ded8c9d315bf

  • SHA256

    e1e8a7e7079dddb7607788de5416d2cb7f4d39e54c4432e231070770951f5fe2

  • SHA512

    dc4855aff4975dca636ae32ece59aaa4fab39689cb50bd57255ba2e424589b733531fbb46edc5fee0990fea865c865eba62dd28527a0f420c9d03a6477fa2ff4

  • SSDEEP

    1536:hrKv01fdG91bG1hQiUFsP5ND0N04dAZzu3q2OWbp1wIRU40vQpyQ:hrKv01fdG99oWa5404+IRUS

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.19.93.200:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d12e0f793229d0750fcc6e583c88b97a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    b9f33eb0997e1275f0a0b76b4c17841c


    Headers

    Imports

    Sections