General

  • Target

    b65acbd3aa3973f2ee2042e9b1df39ca_JaffaCakes118

  • Size

    31KB

  • MD5

    b65acbd3aa3973f2ee2042e9b1df39ca

  • SHA1

    d6988f9921920c26fbb43e9e0175f6f90e2fd50e

  • SHA256

    15a57c29b67783aea43208a07c87e64d1096e9bfcb2ea41350442659e2cf548b

  • SHA512

    3bbbc397c5c410d9d885a9f3402c42c789cd0c757bda8137174f04e409508d6527b5bf306249b92ed063c156a878f87cd8b9e4d2b7bfa88245064072aa178642

  • SSDEEP

    384:AWfw7c9+8rODGY2fndKuMOc3JMdisYpENyQL25ExToh:AP7cZlY2fnd2mXYpvnaS

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.200.33:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b65acbd3aa3973f2ee2042e9b1df39ca_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    c0f4333dc4ce59b796dbdd41da333d6c


    Headers

    Imports

    Sections