Overview

overview

10

Static

static

10

JaffaCakes...74.exe

windows7-x64

JaffaCakes...74.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_96e65e7686ff79eae91ad4b287611b74

  • Size

    438KB

  • MD5

    96e65e7686ff79eae91ad4b287611b74

  • SHA1

    fa225fc3c77dba8fb1a842fb818091b38d26957e

  • SHA256

    9d446d2a93e80ae9123bebe4e35c258c1f6be417cc014ecc9772c8b321360bc7

  • SHA512

    a372ca895ee8ee36d6205894613cc293af4b6dc32a12dc7ceb7cd1409c6054c4f4740d3abe02150156f5facc41ead99124aa351d31aed268baf49d9e5bc08ad7

  • SSDEEP

    6144:dZ+oTBN3uMthbvty3Yy0s0DcqVtiTiUsXHLKf8+k64LYe076vFtjj7L1RBsa4yn6:D5XrOWs0gqriTmLwk60Ye02vbjj7pRF6

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.2:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_96e65e7686ff79eae91ad4b287611b74
    .exe windows:4 windows x86 arch:x86

    393ae1647aee6373b1ed90950be4b4bb


    Headers

    Imports

    Exports

    Sections