General

  • Target

    bcacf3004983d0143cc417d7b2619db2_JaffaCakes118

  • Size

    72KB

  • MD5

    bcacf3004983d0143cc417d7b2619db2

  • SHA1

    aff73892978a440ebb86a8cb034612456f1e7059

  • SHA256

    45b55f853003a727b06cc3c93490a01ac91d748295c9abfe75bb6e8f43813a86

  • SHA512

    741731f5d34f05f7d36811847f2f4fa4f5879ba5d25f78cf7cba1c44d3948070d98b9715d53183b0cbf50c4469835789997d56dc7716936e1873610c6bfbad86

  • SSDEEP

    1536:IZxh8vLxjGMMCegnTm0IudY/TBTMb+KR0Nc8QsJq39:mH8vLxjQInTZdYFe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.2:999

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bcacf3004983d0143cc417d7b2619db2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections