Overview

overview

10

Static

static

10

e1cc040223...18.exe

windows7-x64

10

e1cc040223...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1cc040223663562e83dea1279b829ca_JaffaCakes118

  • Size

    472KB

  • MD5

    e1cc040223663562e83dea1279b829ca

  • SHA1

    6091f144bc7b78374323f38a991d326aca887390

  • SHA256

    fc2e842ceded11ee14f28f97c939bd3ae88c76229d925911e254be9d932fa4db

  • SHA512

    a3fe9e3434d8bccadb384d9433d406fa73ed3a5bf634ba7115c32003e68b6dda81d79b876281a2c752b52da524d487a49717d9d11bab0941c6d20c9c200dcbd0

  • SSDEEP

    12288:CW0mYCeiqDLYI1W/re5IFz3rV7FiTO9StnsBW+jnV6I:QzCD1I1WDq4rV7FiTvnsMwV6

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.25.180:8080

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1cc040223663562e83dea1279b829ca_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    74638b0911b0c9268aae1edee5a60a9f


    Headers

    Imports

    Sections