General

  • Target

    3e315f0fae3164019c0c9c815470d26f_JaffaCakes118

  • Size

    10KB

  • MD5

    3e315f0fae3164019c0c9c815470d26f

  • SHA1

    3ba93bcd38d306478fab2ae1e450c8c7ccc28354

  • SHA256

    7f6abfe6d141da309645774ef0241ae1ff1aa75c16aef4656f29fa240a509fe0

  • SHA512

    eeb700a64b348928ac252bbf80f9c2ca00e85125d9bae745c04af83747363ae706168c571157043b1a2f62a741c955515cc80730f3feff5b83160c85c27f88b5

  • SSDEEP

    192:4UAqdDEz/I0pDUGu7+C+SmUAM+BN8+kHV0LPapy7AQh:4m7+C/AFBN8+kHk5Au

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.3:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e315f0fae3164019c0c9c815470d26f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    46b45d5cb318b2851ee03d73798eb5bd


    Headers

    Imports

    Sections