General

  • Target

    7f228ff326c411367eecb4546017488d_JaffaCakes118

  • Size

    422KB

  • MD5

    7f228ff326c411367eecb4546017488d

  • SHA1

    210a6d627306cafb33dc4a38e397797574a6de50

  • SHA256

    4ea991d498b22ccf58830b99fd01db539b4ba84f7fe5e5d9170ab102ff78fad1

  • SHA512

    be486e9e808bf7b92ceb2f67e4c963bbb46acd73e4429f113a3caa8d5efbcd57faeb73c9e74e75325e4db94dccb36896fed16f656aa7c96ca17f9afd04a13b5c

  • SSDEEP

    12288:0YCZ7HwHkW7qhDQEboh5evbxuPX38aQr1M:0ZbobAMm

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

47.116.128.244:5331

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7f228ff326c411367eecb4546017488d_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    e07710f28b1d1a4943b1b2cc2a52aab3


    Headers

    Imports

    Sections