General

  • Target

    b0dda3034b4685e5b187f9236c076c0b_JaffaCakes118

  • Size

    72KB

  • MD5

    b0dda3034b4685e5b187f9236c076c0b

  • SHA1

    d1c0ee91210f2ac5f401661aea91f324e91b6eca

  • SHA256

    9906f725d8ba18f1fa86ed674de37f5cf4a6ef27b36bf3ff166a1874e17264a0

  • SHA512

    4b82a8f790be6c02e6dcd6180dc71835173496e8fdee8c07841e6c3820003791eebd544672525c611e4a3225dfea015c44a0186ddd97f74ebecd17a1065e6fde

  • SSDEEP

    1536:IER1nBSIvMdALbDq/e9l/QLfWfpMb+KR0Nc8QsJq39:bRCIvM8b2Y2Mpe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.43.130:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0dda3034b4685e5b187f9236c076c0b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections