General

  • Target

    da66a74f37e74d8fef3e25c9c42069ef_JaffaCakes118

  • Size

    85KB

  • MD5

    da66a74f37e74d8fef3e25c9c42069ef

  • SHA1

    349cca3babb40bc0b0d30fe03c981f3ad61c9680

  • SHA256

    46dc2241dc84a9d23c705d3b963c9772aa55cf32d749394502f5bcdc9f8a61ee

  • SHA512

    4204afc19b1e0aeddf9fbb0e87346a98e35ca2a6d6c9d4c7dbc40af3abb2685c39eab0795c7564e82fd77259e3d1dc7d905eff61d6ed4caa415ea60e6bbfc7ff

  • SSDEEP

    768:EUvCvLLR6cL2jbqTb/qNATNzP6F4KJe6R4ZU9qZU9y:EUILL3jTbySTxo4+R4pl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.5:5000

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da66a74f37e74d8fef3e25c9c42069ef_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2070fdb7ac73ede50bab407619a72541


    Headers

    Imports

    Sections