General

  • Target

    4ddfd6cd5406438b0509c2ef93695c8b_JaffaCakes118

  • Size

    95KB

  • MD5

    4ddfd6cd5406438b0509c2ef93695c8b

  • SHA1

    d62c738b4cfedd6183a4cd8aac3d2c196458a9b1

  • SHA256

    17c00950c9cc473b2b11d6c80c254f60b406c3d4d5d7130d48a448790588e625

  • SHA512

    c6aa26e7ba10d6ae2b301a29c8a3be476631f3f5449f7470b00c85f323844222c06c0a96e5490dea50cb9db82e3209e1afbde90e44baba0bbbb925bb55ac795d

  • SSDEEP

    1536:zKy3c3U9Com3I64SSp+sI+3KaAUSQqjsWwd09dlpXaya/:zKys3RZ3dcfI+3KrQ1MHXj

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.0.102:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ddfd6cd5406438b0509c2ef93695c8b_JaffaCakes118
    .exe windows:6 windows x64 arch:x64

    2adb8da7be87c733bf37f105fc8db87b


    Headers

    Imports

    Sections