General

  • Target

    c09c939f7582f76b04acbf3379d32319_JaffaCakes118

  • Size

    9KB

  • MD5

    c09c939f7582f76b04acbf3379d32319

  • SHA1

    8860950fdfb23279a8cb6f43b43fdc66198ec4d1

  • SHA256

    f19c48a8d9dfd6621e011061ba6b0ee54f5d8376d4c39fc619b9a93464cd7f13

  • SHA512

    c5cbaa41d2477e83c3456fa75681c4faf3846715422b7803140e3b6eb239015dc044260e2dab034ac2212c366ab73903ffa2d135b76f8669d9d1596a9a1a5d62

  • SSDEEP

    192:s2QVF/Lr5wrCgENXw/JLfNPRogXRiBd7E5pz6j9RfCX:HsTr5wrH6XaJLEgXRKd7

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.0.198:9012

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c09c939f7582f76b04acbf3379d32319_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    116006dc6286ded0cd1fc3e3d0d1e370


    Headers

    Imports

    Sections