General

  • Target

    40f233d32628934de4ed3c10fee1128d_JaffaCakes118

  • Size

    72KB

  • MD5

    40f233d32628934de4ed3c10fee1128d

  • SHA1

    92948c432dd5f2b8990f1d85e18a96884366a0c0

  • SHA256

    a36ad61e642e5c512691be0bb65c9ba5025d45e08cba723ec8aad3ec3d55ca30

  • SHA512

    fc587189ce0dc1465ac8b5404eb981608cdecbfeb2e8a4641afe8d0f0a90aa626cbd4e14a1b452c4d01f76a21f7e6ab27634b198cc0861f8b74e6e65f8235671

  • SSDEEP

    1536:IGLcxU2EOj/aQGnpeSy592S6ufX7Mb+KR0Nc8Qs3q3V:1cKQaQGnpHs9Z6ufre0Nc8QsYV

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.60.131:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 40f233d32628934de4ed3c10fee1128d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections