General

  • Target

    94b516a0cc35c1589f4ef5c785137b18_JaffaCakes118

  • Size

    85KB

  • MD5

    94b516a0cc35c1589f4ef5c785137b18

  • SHA1

    ef7740520b4c8d213e4cc1ab0db23a55068b2834

  • SHA256

    a364997bad2e9de4adfe09838777a66b0e2aa010801c5deaa2d875e64e59b2db

  • SHA512

    625516192747bec4289bb73a3328837fead85ef77d8d59fc64824b662cf8c60ad3fcb4e3395a956e379b100dcc16b9d46e20736716514f04c09dfc0db5316ff7

  • SSDEEP

    768:mUMCvLUfaR6iL2jbqTb/qNATHANrm6F4KJe6R4ZU9qZU9y:mUbLXljTbySTyrl4+R4pl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.106:31337

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94b516a0cc35c1589f4ef5c785137b18_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2070fdb7ac73ede50bab407619a72541


    Headers

    Imports

    Sections