Behavioral task
behavioral1
Sample
74b585cb56692d39df561cf2f0893975JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
74b585cb56692d39df561cf2f0893975JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
74b585cb56692d39df561cf2f0893975JaffaCakes118
-
Size
6KB
-
MD5
74b585cb56692d39df561cf2f0893975
-
SHA1
672ae030ab3c99e9278451c52974c4c3afeacb65
-
SHA256
8d9695139ff758b0baad1ceb35230c98e4a41260808b05adcf5b6e0ba1b5063e
-
SHA512
3e21f181a6073d37efddda9e94ce4ce118e60bd8018d796e8e5850ddbe31db7c0aa4379c7054aa17208a2013c59e6a6f1be974206ac6d3fad1d9d2f663c7de80
-
SSDEEP
12:04GSGRAPSw9jy6gw01um4eZfA/Tn/ehurw2Plhtx0jf5p:7GS2gS6W9wyhZoKS9b6xp
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
192.168.68.21:4444
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 74b585cb56692d39df561cf2f0893975JaffaCakes118
Files
-
74b585cb56692d39df561cf2f0893975JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
Sections
Size: 400.1MB - Virtual size:
Size: 4KB - Virtual size: 4KB
� Size: 4B - Virtual size: 512B