General

  • Target

    a6a6ce213100a17ded487aa050e1eaec_JaffaCakes118

  • Size

    72KB

  • MD5

    a6a6ce213100a17ded487aa050e1eaec

  • SHA1

    0caeeba7f5fcd1154bb7b1515dbe59f0055178d4

  • SHA256

    40386d0df693e95ea3ca1f93bbc3d00ef4f42b05f911531ab33f535f57a796ad

  • SHA512

    4c31733519ec6a8a13f6988fb466c93edc79cdc4717e79718a422874fdebb89224f97381669ba6a26bb0e993dbfe552ce5dadd1e2cbeffbfc160f6c032bfce38

  • SSDEEP

    1536:I5fmGiS+YgvlgbxdvMSXDGahiF+d+wMb+KR0Nc8QsJq39:4eGiS+ux2F+dle0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.32.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a6a6ce213100a17ded487aa050e1eaec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections