Overview

overview

10

Static

static

10

63ff04bed4...d4.exe

windows7-x64

10

63ff04bed4...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1b5facb864ffd358bf31d164b2c340a5e5c2d83e3c9abdf3041953b9b7f48c1d

  • Size

    350KB

  • MD5

    32790df5701ff3f55b913d14e2efc5b8

  • SHA1

    b10cbc28cafeb02df78d5e63a4a3fa158a27eb53

  • SHA256

    1b5facb864ffd358bf31d164b2c340a5e5c2d83e3c9abdf3041953b9b7f48c1d

  • SHA512

    fa9662984a65728269ceeef4fe79d5cc85423f29b4e250d94a6c4eb07fc8f54fb1119f675fa98e7d928b00bb6c0f5837f215cf671fce3dcd38f421ba98b00d0f

  • SSDEEP

    6144:vIc8tI2T7DlTBRDLQYEx/P3J8+dMcJ3RNvslvuLfavwsMaI+3v2vR7Df47BOek:vIciIQ7DRQYExXZ/dMqjLytM7M7BO9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

185.63.90.137:4445

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_1b5facb864ffd358bf31d164b2c340a5e5c2d83e3c9abdf3041953b9b7f48c1d
    .zip

    Password: infected

  • 63ff04bed4fdb120a9cb9b1ea7fd88e83f12fb01ab6a057088f8016e663b48d4
    .exe windows:4 windows x86 arch:x86

    5a594319a0d69dbc452e748bcf05892e


    Headers

    Imports

    Exports

    Sections