General

  • Target

    b21f73c719b73b158ac33440b251916c_JaffaCakes118

  • Size

    72KB

  • MD5

    b21f73c719b73b158ac33440b251916c

  • SHA1

    816027b00e94afbb6a3c56207eb13073403deb5e

  • SHA256

    28cb2a15220be5081698f4419cc857e3f6891b9a0b2fc29d982bbba2bc5c314a

  • SHA512

    2ba61cd5e2ab5bb99b6dcfd1286b799b2f5f18fdd1060d49b59254172c5081ba4d7eb846b102d01931565382eba1337ebe0d04d93bde705548c3925d3d5ae6b7

  • SSDEEP

    1536:IoMPQidDSBK4N9k8Yn+Q93zwAQMb+KR0Nc8QsJq39:hSwKYKR+23kAQe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.63:555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b21f73c719b73b158ac33440b251916c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections