General

  • Target

    33e550394d4439d1dbd77b4bd125cf61_JaffaCakes118

  • Size

    37KB

  • MD5

    33e550394d4439d1dbd77b4bd125cf61

  • SHA1

    173865d29782e89923392adfb3b2262eeef00e95

  • SHA256

    d3521f62a4f66600a3b84daeb797a9078e9d233e4be77ec5906ea1a8d93e128d

  • SHA512

    7b0f49fad89d2829eef6553a4b068db022889554f1f68e89e3a3cf46950a6e1691b680439ae3159baddd5e915184ba23ad47457f17d59e83bd6240e9f96d0ef0

  • SSDEEP

    768:PVATSMRj2rgCUILcGxlO7AOcqLTNPMsKpQ6lRZ95x:9Vyt9GakbwJPMXph5x

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

41.226.209.109:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 33e550394d4439d1dbd77b4bd125cf61_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections