General

  • Target

    8c0608984c281d5d1fce23c98b62975b_JaffaCakes118

  • Size

    72KB

  • MD5

    8c0608984c281d5d1fce23c98b62975b

  • SHA1

    1a7eef8f306c13557c3fbfbb18e3417adb3e7fae

  • SHA256

    113afdeaf4451fa0e8c675fe7518f2f22705acb47fbe3b881bb152001b1f41e5

  • SHA512

    c9938f6ecf03fef87f7ec3143d86c43d36dc666b0f2aa288671a0e6159ede52af4eb0ab466be3bea8c0e6b87ed94074f63056acb38a438e9506c583506992f5e

  • SSDEEP

    1536:IBcrWh/5158FAc9NjLvRu2cXnBMb+KR0Nc8QsJq39:+Fh/5TE39Njo2qnBe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

97.104.181.187:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c0608984c281d5d1fce23c98b62975b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections