General

  • Target

    bcc7676219780a6e2e0d4705db72affe_JaffaCakes118

  • Size

    72KB

  • MD5

    bcc7676219780a6e2e0d4705db72affe

  • SHA1

    e95dda84f7963936890b41fb62abeee56bcb2e96

  • SHA256

    c0a64d32c4c58f5a61c1aee6fdcf596fb0e8483a1cf63a8ea7bc5995b85f49f1

  • SHA512

    0e73aa53e73d0b2546777e81feb0d9517693ff8e513d52f02013e5dca7066a756967f93f932274fd15ea8b11d6271726193f3ff14cba4e6dccf5140dd01e6d2e

  • SSDEEP

    1536:ImOZ3BhKg7t7g4IZ1CGpYp6OMb+KR0Nc8QsJq39:DOZ3jp7t7guV5e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.35:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bcc7676219780a6e2e0d4705db72affe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections