General

  • Target

    88fc7d444c4311e9e681955bfda984a4_JaffaCakes118

  • Size

    72KB

  • MD5

    88fc7d444c4311e9e681955bfda984a4

  • SHA1

    079f05bb3a445f571eb10671fedaeae5bb55046b

  • SHA256

    3dad0f26836cc12fbcbad5054b69443c2a0d3990517c673d57ac5599db358126

  • SHA512

    aa19a065bebfca78f5e6f4a171b88bc2aad5d340fe14db12d96e5e2a2c717ab2a1a032fc455103c64f53210ed26d7edfbe00c45214b0aa6b6c4aec135a56fc79

  • SSDEEP

    1536:ImEORG3eBIfVSFO+rccUCLQjPfqPNXJNo2UiykNLvMb+KR0Nc8QsJq39:nEORG3eWVSFfwa8jPfqPvNN7e0Nc8Qss

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

31.166.231.89:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 88fc7d444c4311e9e681955bfda984a4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections