General

  • Target

    8b8a092cc14c4457f31fef7c0a95ca45_JaffaCakes118

  • Size

    72KB

  • MD5

    8b8a092cc14c4457f31fef7c0a95ca45

  • SHA1

    f6a7563bd78daf8eff3045043d83998c363d177a

  • SHA256

    43b3b85c7a38b4125d006bb5879dd6f4c248dd42403296bffb5455cb0d587520

  • SHA512

    d3328d86046df85bec8357e43f12c0e0a50fc22cee7a03e1a4b6d638e4c7b77f614372794a22149c2f6543d1ba2ac14ac6cf5c58a56f21f995a75e82ae6943b7

  • SSDEEP

    1536:IHv+lJqil9XG7hV5WwqyI5nMb+KR0Nc8QsJq39:iv+nMlWACne0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

200.100.100.34:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b8a092cc14c4457f31fef7c0a95ca45_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections