General

  • Target

    66d7a6beac88b7601c011d40cc117e45_JaffaCakes118

  • Size

    72KB

  • MD5

    66d7a6beac88b7601c011d40cc117e45

  • SHA1

    c65ecc236686992453174864cd81e952331a589d

  • SHA256

    d3f87c73fe04100c72671c3963b1ce2de1193a4b940d7bdf1a309f279271de7f

  • SHA512

    a9326a42f5ab623d927e915ff91e9ec2f220ed052fd18fefc6cca2895fa9a0e9cfb6420d1e97f8b4957f23f1e3ebf958e4e9dbb5a447a3a8038e958dcf601eb5

  • SSDEEP

    1536:IVsTlDhNGBHNmUk9GWYL4DcMb+KR0Nc8QsJq39:IsTphN08Uk9lYLyce0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.14:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66d7a6beac88b7601c011d40cc117e45_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections