General

  • Target

    3da343c471a1f88656a914abcc9aaa2d_JaffaCakes118

  • Size

    72KB

  • MD5

    3da343c471a1f88656a914abcc9aaa2d

  • SHA1

    a4ac095eea683d18740d4c41b64050f806bde1bc

  • SHA256

    25d764179cde8596303b572dc75af9b6ebe83a28b1e8347dca9e735a76385772

  • SHA512

    433d53027f52d884ecfcdae39eaa4e8aa442a3f6caae28d0982a6589565f74bffc6bf632f81ebd2f9f22e8a26a295e0eaf7f5da782601b4c72ceef9cc262fdc6

  • SSDEEP

    1536:I2IUX/UA8LXzopv0VjHwXDaL1zsvh7NK/LsMb+KR0Nc8Qs:2gsJbkpv0VM+hzihk/Lse0Nc8Qs

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.4:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3da343c471a1f88656a914abcc9aaa2d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections