General

  • Target

    a2d7b437ed2bd9a14d686d2dff8df469_JaffaCakes118

  • Size

    72KB

  • MD5

    a2d7b437ed2bd9a14d686d2dff8df469

  • SHA1

    4db52b6939af074db90505eefe54c6bafa1434f8

  • SHA256

    4df64275e3c7e0533e2ad9c6094309608a8532fbf0547ee3db64ec9a2e3d3c6e

  • SHA512

    636fbed9a346a363bc29962368836fbdc17f30cc9f68ebc33fd285834785935e31ed964d27f547944a6f0303aaded1df65e102fb2cadb5200b1f3dc55d0d6630

  • SSDEEP

    1536:IOoRiZ+smKHUv8aKq+vChAMTYspZFkOC+jMguMb+KR0Nc8QsJq39:HoRiYbKto+vCZTYsKH+jMxe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a2d7b437ed2bd9a14d686d2dff8df469_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections