General

  • Target

    912c0b6cf1818352c4f8b8d875c5fe5a_JaffaCakes118

  • Size

    72KB

  • MD5

    912c0b6cf1818352c4f8b8d875c5fe5a

  • SHA1

    e783b0cb1cf1cf7f8857891f62a031e9334685ec

  • SHA256

    278250285ac2b215e27f526d101aff7681a50c65780193a8ff7f521d6e7151b4

  • SHA512

    e4ea4fd627659d9659bbd37076f2b3fd9523256bfca3ffce8de7834fb4209b737643de7d14beb521bf4876bafcabc956cbfaa19d45aca31a1467c0340369f7eb

  • SSDEEP

    1536:Ioj3jT9hlEkRYvMzXYK/m6IZBJsMb+KR0Nc8QsJq39:bj3XJ/zzXYVEe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

81.17.25.9:1339

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 912c0b6cf1818352c4f8b8d875c5fe5a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections