General

  • Target

    83f0267b6cfdcc6ce95ef06a6787ea7b_JaffaCakes118

  • Size

    34KB

  • MD5

    83f0267b6cfdcc6ce95ef06a6787ea7b

  • SHA1

    2b3894495d86d4f5c5e86678beb8519703aca9f3

  • SHA256

    654a758f04816cc9f7044202b429400c3d21feee977a39ed615570537a591dfa

  • SHA512

    179b3358f516cb1da6dc06e97b9b76a44e4048b1d489acb4640a3bcfe33f67b4bcaf2969ae2ebdab646e570a657a4e9144e97d6e52fcf440187b0cdd418a192a

  • SSDEEP

    768:IlICnDV2s3qRzLRcFQ+ZH49d5X0xCV1EacDw9EKvcYM8l1:IlICDV2S+LGFQP39EKv9M8l1

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.56.1:6666

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 83f0267b6cfdcc6ce95ef06a6787ea7b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections