General

  • Target

    f8772b9a80138cd39a71f4faac388e49_JaffaCakes118

  • Size

    9KB

  • MD5

    f8772b9a80138cd39a71f4faac388e49

  • SHA1

    407a90f3af90cb6bd8b8fa63990bd71409556da0

  • SHA256

    432b4e84ec739ebeac84485407f087223331eaef24c6c7b133c353c618ccec8b

  • SHA512

    86fa0352c0f14f9bbfeec86905e3c643a7e968a8a610b51c6a9229197d7d394c1c0f7b2d30467ea481f4d8b59315b891d7e419bf9dd785bda962d797e8c06fbf

  • SSDEEP

    96:jQ3Zn/2CiXsLex50FaCRwIvvwF+k4s/DjiWjOr2a0cZYynqjfQaJotQPKu:c/tiXsLecRXvvrASWjOPYHjJotU

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.1.104:8892/M4yb

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8772b9a80138cd39a71f4faac388e49_JaffaCakes118
    .dll windows:6 windows x86 arch:x86

    7d60fc123518bacdc2d30fbc42f3eae7


    Headers

    Imports

    Exports

    Sections