General

  • Target

    5fcbfc1d441284206533c1bb1912a727_JaffaCakes118

  • Size

    72KB

  • MD5

    5fcbfc1d441284206533c1bb1912a727

  • SHA1

    d22c99307a4f1c1958010d20cd9d489835566990

  • SHA256

    1668c0e1fbe41ad600487d5d54fe525276d16411d806c79abcfe4bb94ff94451

  • SHA512

    b5043bfb3ac2509d4c44bd1e5c305018e5395dad1f5abe64c5d7e61b3e6aa04282395a2cbc344eedb534e904088d169427fb6a9b4bd531fc73bd4abe3145bcff

  • SSDEEP

    1536:IIoccMTMh2lohdDtWjeBv0q+0A9xljQ4aSMb+KR0Nc8QsJq39:Roi82qhdDtq98We0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.2:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fcbfc1d441284206533c1bb1912a727_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections