General

  • Target

    a40a9e165c60a7d0884ab5f848027bf9_JaffaCakes118

  • Size

    7KB

  • MD5

    a40a9e165c60a7d0884ab5f848027bf9

  • SHA1

    78ac67e5510b2be11142b1c0c2e9f926ff820995

  • SHA256

    d2bdb9a9366beba202f4806c661b19507d58822c1d72c63d7b400a6275fe4f37

  • SHA512

    9f262f49f85ae1c468f1afd6448748bda7b2d1a813e11fe5bc24b8ff11dad6230e0cae4a1557fb40fc49a687557713a509b085d914d6feaf80d07ab97e2415bd

  • SSDEEP

    96:C/9yRkCuXUAZycdVYRDM+Zv5P+pD6soIJJGI+RqK04C7tCE/mg1v84:C/9yehZNYZZv5P+gsdJJ9EqKU/f1v84

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

0.0.0.0:0

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a40a9e165c60a7d0884ab5f848027bf9_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    68ed529ad8a7aeec8abd248c325a13fd


    Headers

    Imports

    Sections