General

  • Target

    f4878c09f24541ed45b0c3c828149bc1_JaffaCakes118

  • Size

    6KB

  • MD5

    f4878c09f24541ed45b0c3c828149bc1

  • SHA1

    6dc3f29dab8e0c06dfb2cd594db17d09da056f36

  • SHA256

    1bf117260e66c800875b59272ee95f3eb2b6b6292a654836c0c3d6a2f219b37b

  • SHA512

    358e508e51523711b2401a2a0b5c3cfb3ee6b81749b037397bb9863fc6b520e4db41030847998dfba325342282527c11ff990302dc7e222d5fd5a626b3700d11

  • SSDEEP

    24:eFGStrJ9u084Wg2PHaYjGKZqNeNDMSCvO7GBQAV:is0DitC7SD9C27GBQ

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.1.106:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f4878c09f24541ed45b0c3c828149bc1_JaffaCakes118
    .exe windows:5 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections