General

  • Target

    9a0e07bf7b0db03c864e5a59f503249e_JaffaCakes118

  • Size

    72KB

  • MD5

    9a0e07bf7b0db03c864e5a59f503249e

  • SHA1

    061b6cb241a1b43590861ba347de8aa13cb48923

  • SHA256

    a387020dcdf22db01195442ce8b509a10bddc0a2bd1119b01653ed6770b01b06

  • SHA512

    39a2e29ceb18ceec2ad05cb0b6145fe1e2787bd88a5838d191039925941f61f67312850b77a35cdec5bdd2657b7ebb6c62d4a523823f99cfa2c339b4aa0f032f

  • SSDEEP

    1536:I/PV42yMdhEU/acdXIWEoiGMakCKt4nEMb+KR0Nc8QsJq39:yzyMdj/aEgS8yEe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

51.79.158.48:4040

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a0e07bf7b0db03c864e5a59f503249e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections