General

  • Target

    cff284547af22c55e71c25127b265c78_JaffaCakes118

  • Size

    72KB

  • MD5

    cff284547af22c55e71c25127b265c78

  • SHA1

    a8c9d5673599161193b1977c146ff1457eafb684

  • SHA256

    0085d158a20dbf2c4df8ae04c7ad8cadd5c01740c96b7c1bd2f0599553c31be7

  • SHA512

    f37d79f8f8a8c1c6f0b09de1dda75e040e0297cff3d6837bae7e2e4256803fc62bc991cceb8acbf055ad3bd3fbf438bbd9f2868cada8ae70c1f96c464e8cd39d

  • SSDEEP

    1536:IZ381BnWGXaxpquNKE2kcNzkMb+KR0Nc8QsJq39:+YBnWGXOYq9ske0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.1.3:4444/ALn1C

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cff284547af22c55e71c25127b265c78_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections