General

  • Target

    22a7feab072839517615405ae180e544_JaffaCakes118

  • Size

    72KB

  • MD5

    22a7feab072839517615405ae180e544

  • SHA1

    29bfa306cd2fd21e02fb2585c21f7bf80f1f080a

  • SHA256

    8fc6cc4dbc75112e9131cf2b64eadd382a2587e0c2457ce80963cc8c3de7acc1

  • SHA512

    21cc219e8092b9534edf107496217896c54da3e8d2359f4c136667a9c615cd3485905e98951cb8ec9fbb44b24de902ea8b0e4b2a5569252882593846ad6ceb71

  • SSDEEP

    1536:IGCmCJJ1DXuLZBiUsmOz14mHoM0YrMpMb+KR0Nc8QsJq39:jCmCJDXuLFu14JOMpe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

91.196.83.243:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22a7feab072839517615405ae180e544_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections