General

  • Target

    49abc8c4af2f068a5e174926acac0012_JaffaCakes118

  • Size

    39KB

  • MD5

    49abc8c4af2f068a5e174926acac0012

  • SHA1

    acbd38c4a4092b67a71d7ce804ad27ecbc328e41

  • SHA256

    d0a7d11723bcf29e9e1700104bee5e9532432f550bc1230fb054a8f001ceab5c

  • SHA512

    0fcb338bc4af1629ccc0188694bc425e82b6c0cb570df543a99680024a0d10cd3e7f0544d5b09a6dbcba61469e3a025526e33c0130660b0c0f1825db35fbf497

  • SSDEEP

    768:2iFttNR26YeG7ng+fWxGVvgqz7XTY2mg6uasOevLVU:vXZ26YeYguWxcgDYasOeRU

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49abc8c4af2f068a5e174926acac0012_JaffaCakes118
    .gz
  • sample
    .tar
  • mlw.tar.gz
    .gz
  • mlw.tar
    .tar
  • Avast_ml.tar.gz
    .gz
  • Avast_ml.tar
    .tar
  • Avast_Mlwr.tar.gz
    .gz
  • Avast_Mlwr.tar
    .tar
  • CombatArms.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections