General

  • Target

    43c23cb79670abc8d402f05f0963ad19_JaffaCakes118

  • Size

    43KB

  • MD5

    43c23cb79670abc8d402f05f0963ad19

  • SHA1

    24dbb47cc58614cb4497e12c58495c595e55ac54

  • SHA256

    6f0008fec28a2faf0d1f9520e66693ff6c7e68fb0a151f7c40193a54be3fba58

  • SHA512

    84364ff3f00e640196b0c1f1e734ea02e058d7b73a64ce4f41ae03297bf583d13fc20103293a557ad4a1fd62bb54bcfa41eebb1a7002e8d1eb4d073fa3ed7f61

  • SSDEEP

    768:F6VJORgxwYXXVjwoopThGM9iRdJtvFifC2kjZWxef4Z/kxpmI:FoJwgaY13oNhqttvFgC2orxpmI

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/exec

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43c23cb79670abc8d402f05f0963ad19_JaffaCakes118
    .zip

    Password: infected

  • cert.bin
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections