General

  • Target

    93d7b20d3937c2943102ca4a1730661b_JaffaCakes118

  • Size

    72KB

  • MD5

    93d7b20d3937c2943102ca4a1730661b

  • SHA1

    e69b4afb7e3e8534082a94154c1e1dcf7596b403

  • SHA256

    95f59341ecd7b3ff69328d66aa25f96c2a82083e116d1d03a2c89960591c9217

  • SHA512

    8507d616b698d927565af3703c13e7d64fda8b0da4a73d21b10a6b8528602c95711e57a12587a67a875ed56ddb80df33f5d32509100c2b245841edf906098860

  • SSDEEP

    1536:IS24hQpBr5/UcCIOTqxPfJMRoTYW/WMb+KR0Nc8QsJq39:E6QjtsczPxttue0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.9:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 93d7b20d3937c2943102ca4a1730661b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections