General

  • Target

    ce2fae976455bc46970afe3d82a72b0f_JaffaCakes118

  • Size

    72KB

  • MD5

    ce2fae976455bc46970afe3d82a72b0f

  • SHA1

    7bf545f3df807680e8cdfbe656976fd7f6aaa128

  • SHA256

    4b2d04b7fc980e665a7af19654196830e9fd951410ba64a4ee91542838a3aab5

  • SHA512

    53093161ed6df2aa0558339b2eb9f19b235bfe6ae420fbc1da3c1e370292705db59c6b901a25f69bca5b6687e16a270c96d8868c2ebaaa17c06f4df1cd8ace8e

  • SSDEEP

    1536:Inlr+jeTERiT8YB/4BWDoiMb+KR0Nc8QsJq39:elK6SiTCWDoie0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.101.91:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ce2fae976455bc46970afe3d82a72b0f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections