General

  • Target

    acc8c47fa44d606f6e40ed5318f578ad_JaffaCakes118

  • Size

    72KB

  • MD5

    acc8c47fa44d606f6e40ed5318f578ad

  • SHA1

    3e7ae6d10d5c9d2e11a32e82c60ad87e20f7c870

  • SHA256

    f84cc2738891d7f560d31ff69222960f2fd6b47bc1df5cf282643ac6adf4fcf2

  • SHA512

    1727172602d95ede0a1607fda2296258bb1ec8b4dc38889621d1f02159a23638d295077ee02d727e20d9651602e677989046e91ef5b27c22ddc05142dd2021e0

  • SSDEEP

    1536:I8O9hajX/nU+DXWktU9I9ho1qBT4oMIrMb+KR0Nc8QsJq39:5Hr/n3DmktH9A+4oHre0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.2.114:80/ArglL

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acc8c47fa44d606f6e40ed5318f578ad_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections