General

  • Target

    370a2d6ed33d913ac47a98495f16527a_JaffaCakes118

  • Size

    380KB

  • MD5

    370a2d6ed33d913ac47a98495f16527a

  • SHA1

    eb97fbb134aae40278b75e24198d85b6d72e045c

  • SHA256

    e52191a8d4f57afdfc335a035f476e1055db054dee6aab073448210829785b65

  • SHA512

    918fc21162a463ee6688b12397b9424bbbefa5c3a160bcdd50d4d67382ef20da27f48e2762fcf2104c00e850eebf1da18787c89a5a71f2af9ad8c075ed480b7c

  • SSDEEP

    6144:q/5ogEkJQoGQuY2jnt3wIiB/DRsNxIJU:q/uFQknKJ7yNGU

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

127.0.0.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 370a2d6ed33d913ac47a98495f16527a_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    dbe5febb7a19ba19945a8e8ba6534abf


    Headers

    Imports

    Sections