Overview

overview

10

Static

static

10

JaffaCakes...8e.pdf

windows7-x64

10

JaffaCakes...8e.pdf

windows10-2004-x64

3

cs_sb.exe

windows7-x64

10

cs_sb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9576d02a063672b2dda3060dc50cada3f1f8766b6986b8b47193e3df8b495c8e

  • Size

    932KB

  • MD5

    a0f48cf0432e7b21daafffb4f67f5dc4

  • SHA1

    92535d5a12248d620730b64af81c7716e9fccc62

  • SHA256

    9576d02a063672b2dda3060dc50cada3f1f8766b6986b8b47193e3df8b495c8e

  • SHA512

    010b6e06de8aad716287b2ae2dc7426a4493e4a3c891c847d5bd94ccc77055a0aebed6e525696805c30e76bee88c0e39394c7feba2154e5514241771691ab10d

  • SSDEEP

    24576:t/5xFNDwdEpg0Z6NWUzrjheEZjAowHKaEdx6KTmug:5zFND8r0oNWUzrjhmEdxJmh

Score
10/10
pdfjavascriptmetasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

5.6.7.8:443

Signatures

  • Metasploit family
    metasploit
  • PDF contains JavaScript

    Detects presence of JavaScript in PDF files.

    pdfjavascript
  • PDF contains one or more embedded files

    Detects presence of embedded files in PDF files.

    pdf
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_9576d02a063672b2dda3060dc50cada3f1f8766b6986b8b47193e3df8b495c8e
    .pdf
  • cs_sb.pdf
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections