General

  • Target

    3ef389396cca3480845bd330971aa982_JaffaCakes118

  • Size

    72KB

  • MD5

    3ef389396cca3480845bd330971aa982

  • SHA1

    21801f3fbf28e97ecc31783f0210acedb693ae2a

  • SHA256

    2e844abea8bd6527859a398563caaa6060fcb65aac5e5eec86befec80114f087

  • SHA512

    9b818af0f11ade213b80fc3754435646ee9a92a097e2dc38a228e504c63842b285596e2e4b6f6316f6554ade7fe120503031bd72bcc181482686333d38d3edbe

  • SSDEEP

    1536:IlRUrnqTjsc/SqEnmG98y4VN3kWJ8WMb+KR0Nc8QsJq39:sYM3KLmG9sVN3kwze0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

93.182.181.75:7100

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ef389396cca3480845bd330971aa982_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections