General

  • Target

    b4600e4cef6b27b5deeb43a5bc3a174f_JaffaCakes118

  • Size

    72KB

  • MD5

    b4600e4cef6b27b5deeb43a5bc3a174f

  • SHA1

    2be7505487390e3577d23f7980925dd37a08475f

  • SHA256

    c2f7ad2038709e792eb143539d908c063ff63be985ff834962cfe2b0071e6a7c

  • SHA512

    4ca3274fa2fe60115c14be13fa5ccd7fa8b24d380013a7c54f98ee52b35e381bdbe7ecf7434168fbaf7f7ec47ceebd8020dd5e99436e864cd78f430e8ff9b629

  • SSDEEP

    1536:I8yX4ZjXN37JA4UijiSzkCH7QVBdSTXMb+KR0Nc8QsJq39:K4n9JUimGb4oTXe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.6:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4600e4cef6b27b5deeb43a5bc3a174f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections