General

  • Target

    2bf7b3137e5c21f5aa71ac0c72f64c9a_JaffaCakes118

  • Size

    72KB

  • MD5

    2bf7b3137e5c21f5aa71ac0c72f64c9a

  • SHA1

    0e2b61408e3f22128bef8bc969e27ca862c1320e

  • SHA256

    4c8dda01dd811e257a215e5320d9b4d827a6b1a5a7fdc9f5080fcbbd99558f4e

  • SHA512

    4e0f74f4baf4430c6282d7278e48faa0f9c9ad29281d0add184c49e07febb78b789e18b9d23534853fafc53e44ab950f102324a2cc9362aa1f75613f101103b8

  • SSDEEP

    1536:IxMzkHhFqLlX36cwZSmTdLmwpBBMb+KR0Nc8Qs:MMzkHjglpWTdZBBe0Nc8Qs

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.71:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bf7b3137e5c21f5aa71ac0c72f64c9a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections