General

  • Target

    39db9228368114fb5f0951174d00d5da_JaffaCakes118

  • Size

    72KB

  • MD5

    39db9228368114fb5f0951174d00d5da

  • SHA1

    21349db98058c9476656013460991dba62e80508

  • SHA256

    7f37925746575e3f6cb18fc736f64f96f1702e314d8313eb74389b8a88b5a01c

  • SHA512

    960c61bf8ddb24a88bea81814e7ef3df1accd73b4120aa427e6670a33b7f5e89da0c2b2929f2b4c2a842889ac41d79e98aacb649b9e423e9ff5bfe0b7e2f104e

  • SSDEEP

    1536:IBszWM6WVhHM5+xeUzmI5TvK+5vDAMb+KR0Nc8QsJq39:IszWM66M4x9h5TvK+xDAe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

127.0.0.1:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39db9228368114fb5f0951174d00d5da_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections