General

  • Target

    b7afcfdaccaf02852a7ae3574c65ec4e_JaffaCakes118

  • Size

    72KB

  • MD5

    b7afcfdaccaf02852a7ae3574c65ec4e

  • SHA1

    14f94b72f756ab145e48c3772b90abbdd1658e0e

  • SHA256

    dbf8b99fab2d494ea32ae491648ef0c662712d3ee4187e39baabdb409c2c10a7

  • SHA512

    3ddc0c3adcb76b40dbe2f20d64ae2a055e0c07e618149361d032653368c81f7d75e4b92829ce6c63704ca516e1353cfdafcb4aba4722cae51945813c76f10320

  • SSDEEP

    1536:I5IARDyhcRzj8BfHHX9lJaWrZ/1Mb+KR0Nc8QsJq39:0behc+x9lr9/1e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.185.211:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7afcfdaccaf02852a7ae3574c65ec4e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections