General

  • Target

    ff0a9a51a747bb6a4fff5321a922db7f_JaffaCakes118

  • Size

    72KB

  • MD5

    ff0a9a51a747bb6a4fff5321a922db7f

  • SHA1

    4fccf8e305aecc50efe7ccb1285a99f17c1d3bad

  • SHA256

    1b93a203f24d4922b9e4cfa4f5896712e0029eb688c7aa99ce2cff1035323ede

  • SHA512

    bac3a6312cd2d2e1444d909697f0e8684fb02e71c462eb4093c235820c8c5d8bada00238b7b8896a26e316aea92744dadf624f143ab9b142cd2281715210bbcb

  • SSDEEP

    1536:Ih8xaKHu+jUE2RyQCs4p8K8Mb+KR0Nc8QsJq39:O8ZH7UE0uye0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.9:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ff0a9a51a747bb6a4fff5321a922db7f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections