General

  • Target

    5a2ab0a52e47c3cbf157a7b8cda66e5d_JaffaCakes118

  • Size

    72KB

  • MD5

    5a2ab0a52e47c3cbf157a7b8cda66e5d

  • SHA1

    c410561316160eb83d53cd957fc33605772ba479

  • SHA256

    3f047693467f46d42297cb3bd3f03cc7315f4f22865df21921562fde64a99db5

  • SHA512

    9ab5e0fb7531ca7f3d8a8e56ef79cb141b995a5f4890676469af707602b9a4671425ed9b52ff0296fc78925a96b2f4e26931cfb32214598fa0faeae84282765d

  • SSDEEP

    1536:I6bijJnTfy55KDqa6wcL4MtCAAeqMb+KR0Nc8QsJq39:ajJTq5uc8Pe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.67:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a2ab0a52e47c3cbf157a7b8cda66e5d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections