General

  • Target

    021ee2b0d0f0292bddce1127af1554bd_JaffaCakes118

  • Size

    72KB

  • MD5

    021ee2b0d0f0292bddce1127af1554bd

  • SHA1

    993a3319a1929ba34321347a5db42900988e41fa

  • SHA256

    25d98557c9b309dc838d026c32b6a6a30ff5cf613869709c8cbaa268f2cc8704

  • SHA512

    084443c69508f99dfe41592ae539be5bb6efe4e0d7fee3e1d2eb7acec3ba04f6c1ca25ccac990389638abfc2be07d41dc83d6606735cbc321e8247e6d37353be

  • SSDEEP

    1536:IlvzVa3yu+ivhqjmnSFVVxVbrjTbMb+KR0Nc8QsJq39:IvKFQjBBp/be0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

46.1.65.145:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 021ee2b0d0f0292bddce1127af1554bd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections