General

  • Target

    240095fc7e3d42933cd48ce77efa31de_JaffaCakes118

  • Size

    72KB

  • MD5

    240095fc7e3d42933cd48ce77efa31de

  • SHA1

    8c998ee7940c39ef11e3424f29ac8fd54ec782ff

  • SHA256

    3b9d5227072192c6a9ec8cd9a1c769656646151e13c33f6efda125380f2dcfa3

  • SHA512

    d1924f124ab660a0c274df2bea94913b36047d3331c79d5804aa8c19a9da7bbd22183f93d5d2e51e9ed106d606ed131f808737455fe5fe87cbe76eb010fd40a9

  • SSDEEP

    1536:I4PM6L5AHlB6d/pl9kxc26S+XsE4lUMjNAMb+KR0Nc8QsJq39:1KHApvkxc62s2MjNAe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

84.222.247.30:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 240095fc7e3d42933cd48ce77efa31de_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections