General

  • Target

    fff1de0be1b121ddf7844ececcab8188_JaffaCakes118

  • Size

    7KB

  • MD5

    fff1de0be1b121ddf7844ececcab8188

  • SHA1

    938cab845c8b430547e60649e8032c03a43ff749

  • SHA256

    822bb6b0907ccc746b6291b101d193ed8e94943d29e7f28b43093d1b18568672

  • SHA512

    f3ae1a0d428d04e939e30dd1aa9575ee61438ae27404028563f2eb2273cfd85657b48796212794c0a83abffcbbeac0a32fda640ae602be16ab49d52ad5dc23ff

  • SSDEEP

    192:AEcD1THDvEwVo1PpDIMXzjt+6LBaOL3d2uzP+Hsz3u:+1T7EwVo1dI+bouot

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

114.114.114.114:3389

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fff1de0be1b121ddf7844ececcab8188_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections