General

  • Target

    2e32c11e674af05225caade8fc8c1ddf_JaffaCakes118

  • Size

    72KB

  • MD5

    2e32c11e674af05225caade8fc8c1ddf

  • SHA1

    74c034fa4a226718cd121925432e3de977ffe3b8

  • SHA256

    1f2c7d859eda06869572f521633d84eab75e8b8ff18badac515b648a523fb5bd

  • SHA512

    40533af509d73c5646f76154c58a2d3e6d61bf1b00b2c55d5d5277ce9ff0877fbe3a463fea55eb225ee7f77bcd0f598a1328e88ea586180cf5792e31f50d8b05

  • SSDEEP

    1536:IRio4VF5W7ptFkRdXtO4AyKe5N0tvMb+KR0Nc8QsJq39:9bZW7nFwlA4AyM1e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.110:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e32c11e674af05225caade8fc8c1ddf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections