General

  • Target

    294464012a5cc5523e62584c75ac0452_JaffaCakes118

  • Size

    281KB

  • MD5

    294464012a5cc5523e62584c75ac0452

  • SHA1

    ca5bb472af82208c4f86adba84afcb17d879ac16

  • SHA256

    6032370d2ecfeb8e51dce26e44c326fe78531aae57cf85e05c9197ac40907a38

  • SHA512

    8307f48f08a54a7ba5cc151e41405d9222792be45227262d522315b768be14158a5f85547f878952633539e439eb2ae9d5f57df88d2d9dd9e9cef16933f9808b

  • SSDEEP

    6144:lnqqq8W/1MW8WqERmz39Wd6LacZ2yai0WqoCTVtq:l4vqYHULAU+dovKTvq

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.56.103:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 294464012a5cc5523e62584c75ac0452_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    826b74efdeb4af4c62750b0807455339


    Headers

    Imports

    Sections