General

  • Target

    b4f65ac44d751d3dbd830d01fc55ce9e_JaffaCakes118

  • Size

    26KB

  • MD5

    b4f65ac44d751d3dbd830d01fc55ce9e

  • SHA1

    bde3a183aed240841d9d7e65a179b045020b3d7c

  • SHA256

    217c75dcf36cc073542deb131f60bab1392b2bfaf4471097ed71cfde1435d92b

  • SHA512

    20f842cca4e2f27189fa8173e31001fd04215ed709f28906a66a496edde6b99ee94de8986c726988a373bfdea8012b59ffff47aba405de2d9fdd981a834fbc46

  • SSDEEP

    384:wXlguLZzDo4t1cIAxbE9lY4a0kHhU2iSkx/6xX5YB9y8:oFz84IiSkx/++J

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.164:31337

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4f65ac44d751d3dbd830d01fc55ce9e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    812077db4cdcc21b468452fb4b6cf93c


    Headers

    Imports

    Sections