General

  • Target

    0d5c75e6fb47a1cb6c6a25cb664ce029_JaffaCakes118

  • Size

    72KB

  • MD5

    0d5c75e6fb47a1cb6c6a25cb664ce029

  • SHA1

    c295e35d9bcf2ce497c6331af90a6dbc2c0e5ede

  • SHA256

    dadd0b2e95cf8cb6c032a0f6e9bc49f0ba75cae807122f723c16c11ac9752283

  • SHA512

    4f369ca78083e7dfe452fa39e203ab6d370daca12211fa7f58f25369aaa79824aa98974ab1869963644b41234231f91fa79eaa866e98c817a16b4e25bf76b8e2

  • SSDEEP

    1536:IiKS1KdYuZaJATr8SVeKWASDxoN1uIsMb+KR0Nc8QsJq39:kPdYusIYSsp7DxoePe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d5c75e6fb47a1cb6c6a25cb664ce029_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections