General

  • Target

    8c28227416f7401b21bdd7567866a47e_JaffaCakes118

  • Size

    72KB

  • MD5

    8c28227416f7401b21bdd7567866a47e

  • SHA1

    5ff7247dd55039038511772dd7d76586034765c0

  • SHA256

    14e01a6f12c4573a8aac2f2571e024adffe6063c6d512a70d66fec443b545f86

  • SHA512

    af46d20629146902fb5cc6090435e7c15fcee156d1f5b879c35b5af7d491173555f004512b1149a4a133fe7dae5c1a43fed1807bff00b59019f783087c746967

  • SSDEEP

    1536:IUgFy9scF7S18CrSxkEvnh2vS/5PdW4ZMb+KR0Nc8QsJq39:lvscV08JvWSbZe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.102.129:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c28227416f7401b21bdd7567866a47e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections