General

  • Target

    3be9d2239758c43e4bdded0a5cb53fef_JaffaCakes118

  • Size

    72KB

  • MD5

    3be9d2239758c43e4bdded0a5cb53fef

  • SHA1

    2cb1f2c53f15e02c8c7eda03b31ac5c45c81f038

  • SHA256

    d08efafd61f5089c49b5c2620e608f0fc9751c77cf1616efb24d68867d3eba7d

  • SHA512

    7524757abfb359f644e097f566b45251dac7a74ef0f2ba2655c41d8cefd3eb90929979e094b63c9590e6bf4590e341edf07731b9bb3fb0d5581e71f594e27073

  • SSDEEP

    1536:Ih6X/IKlsnPEy53e5mTmB8CcPcIK9sMb+KR0Nc8QsJq39:Y6X/IKlsPEw3eAmLTxse0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

200.86.8.47:53

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3be9d2239758c43e4bdded0a5cb53fef_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections