General

  • Target

    ce31db4d923145cdd519f9593f4f7c43_JaffaCakes118

  • Size

    37KB

  • MD5

    ce31db4d923145cdd519f9593f4f7c43

  • SHA1

    2fe76111997e1d1ecb478b71ddb9de69dcc88007

  • SHA256

    2defbb1882bfda8c6bd2f40ba4966628a2ffebb883f5afbd5ef48943aafd654f

  • SHA512

    785c812d06a78a26d71e25392846deeba215bf27b9d0451c1de3ad17d2542f5e1b4a50b9270658638307dfae866e827c8e99f6c2fe153b1a4593bf576406dd98

  • SSDEEP

    768:oVAuSVSjy52CPImNn7A5cCLJNPMDKp5H6lRZ95x:KwQOhnku4LPMu7Qh5x

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

197.0.148.179:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ce31db4d923145cdd519f9593f4f7c43_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections