General

  • Target

    b11a0c11f4e032d10c408ba5c62eb120_JaffaCakes118

  • Size

    63KB

  • MD5

    b11a0c11f4e032d10c408ba5c62eb120

  • SHA1

    6b3933a08d1c430d08bed85dec9f41220f3b6a36

  • SHA256

    dde5c6708bf81fed3d6004197c8852cc68d14a486421e08961a7cf3219910309

  • SHA512

    ec8cd5bd8eef792d76071216a79a8542c16286ea3fea91f8b089a46425d32e6c4304648f884eccf247af044fb55f8193649d70d0d09b2d45b8b80ae34d840f5e

  • SSDEEP

    1536:fcFpa2e9WlvGM3fmZNHMIt6Mb+KR0Nc8QsJq3I:fcFA21ldgtt6e0Nc8QsCI

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.254.5:123

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b11a0c11f4e032d10c408ba5c62eb120_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections