Overview

overview

10

Static

static

10

JaffaCakes...54.exe

windows7-x64

10

JaffaCakes...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_959e233f224a73878dd7e3079380ed54

  • Size

    72KB

  • MD5

    959e233f224a73878dd7e3079380ed54

  • SHA1

    946fc24b38dafb0de6012fa4908e6a8dc83ffe32

  • SHA256

    009e281065d289b5517d3ba7555323f1a7e90b07c6165229cfcae8c2898b67c4

  • SHA512

    801686704cfb95b1d5088a7bb74d6eaaafa4d4e35db9884f5ac7a00bd35d6381e108cc44668c9dc93692af40afc825d7f21ed4104f20dac8b8f0c641f10fe229

  • SSDEEP

    1536:If31oxpgUySZDDsQ8kPvk/C9cppn4Mb+KR0Nc8QsJq39:EWPjkQ8iWTpV4e0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.102.128:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_959e233f224a73878dd7e3079380ed54
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections