General

  • Target

    ac0911fea6ddb15fc071cca432e118c2_JaffaCakes118

  • Size

    94KB

  • MD5

    ac0911fea6ddb15fc071cca432e118c2

  • SHA1

    9e5cc1b7719a1dac19d094c8a198c4a1a5a73190

  • SHA256

    4104d5250b7d38eb49981644fb0210d9ff69d50ba6cd1a523667098a80dac7f7

  • SHA512

    f76e70198708a033df78f5d66b64ad31364e06f7507bdcde8f7a453c647941ab3f48504c64052e0e668aef47ea96c98371aed44832f6b54b8ebaeea7b1458a0e

  • SSDEEP

    1536:I4T46E3VoAenFxBxBWh6u5tDGMb+KR0Nc8QstTRq3:LmAFxBxEJGe0Nc8Qstm

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.200.130:4444

Signatures

  • Metasploit family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac0911fea6ddb15fc071cca432e118c2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections