General

  • Target

    443680904e6387336410454c358d85c6_JaffaCakes118

  • Size

    100KB

  • MD5

    443680904e6387336410454c358d85c6

  • SHA1

    dd48fd763966a3905f9eb34fb68bc0a322b83ad2

  • SHA256

    f3b1eb48ef5dcb9f9dc3d915449e49e906cda9728c5a3c0de9a05e4781096c1b

  • SHA512

    fe16304fe0ff5ac071f83ad7b3783c6e79f693f3f449da104feab9ba0212a797cf7d768ae0220a8f27209281ead735447cf3a10e07c494b4db2a23afe4ab29ff

  • SSDEEP

    1536:3zV9QkOoSufUbRwMNxDbXZGXbTVre0qJGZSOqm5Mb+KR0Nc8QsJq3:jVFOoSusbRZNxRoTjy6e0Nc8QsC

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

118.223.26.15:1337

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 443680904e6387336410454c358d85c6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    736c683d719f1d4e98e457255f29010d


    Headers

    Imports

    Sections