General

  • Target

    0a2e7c9970f917b9c3684c910475cb09_JaffaCakes118

  • Size

    112KB

  • MD5

    0a2e7c9970f917b9c3684c910475cb09

  • SHA1

    010ac3c32886343199bd5711d3d05fd448fa7b10

  • SHA256

    9a27e144cd42a424ba68667eba2ac11e8326d39742f215343a0ebd6bfa497f38

  • SHA512

    212a79017bb62ab1f7746522506cadf9ee1e6dfe9c319c586688497a69d4ba1a30f6040c7ff371d0388a2ab925232e66299063678a0c0d59be59e30d14abae50

  • SSDEEP

    1536:C8h6V6Z84ZOSw067JPV8+V9bLCjdQvGKwSHGmdD7zvQ0UoPvLV6eBsCXKc:C8u6yga067BVJ9ka+KlHGosboXL1BsC

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

80.59.116.204:3456

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a2e7c9970f917b9c3684c910475cb09_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    08f6a1b121da8cedde2d1089d0906ed8


    Headers

    Imports

    Sections