General

  • Target

    2d4e9dfc6912e663a2e4d20054036aa3_JaffaCakes118

  • Size

    72KB

  • MD5

    2d4e9dfc6912e663a2e4d20054036aa3

  • SHA1

    53d8095d01113d35b3ec9f9d674209e313ab8dc2

  • SHA256

    c92bff60dca135b76976fb5f59b3d6bbe2ecd1ac39cc155c9fc313dd47c8c1aa

  • SHA512

    97245e0aee7ac180e867c34b379ede7f458d0440b8d9b1d427e159312bb74f90dbc343e8ab4c1bbfd9736cc3fec1071f3a6937941899190cb6f044a91df024a9

  • SSDEEP

    1536:IN5WEDjwluecBUh4jqXRi9WQKAhr6tdZjMb+KR0Nc8QsJq39:05Wn9D+e49WQUnZje0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.88:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d4e9dfc6912e663a2e4d20054036aa3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections