General

  • Target

    df919ebc1844ce7804a10c91335a3523_JaffaCakes118

  • Size

    88KB

  • MD5

    df919ebc1844ce7804a10c91335a3523

  • SHA1

    0c67329baa8378366bb8b40d24d4deb9e44e74b8

  • SHA256

    a2e404695c1a519d562c94e6ae662d458acc85212e95bfbb1f5822d1464b5c9a

  • SHA512

    d0e403e0f26b6860db492a250ad157719d6f991315145f520e5f0934caa91e9794ec15859bda13232c394b2a807f8c099e4850b367147db83d4e0e4b70af20a4

  • SSDEEP

    1536:ZiQh6OiGabbloIBLIHqKqvZORIKskz/oo16rXS:ZimSbblKqxO6rqIri

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.13:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • df919ebc1844ce7804a10c91335a3523_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    018ecc82e3efbcced9f483b923ca6d4c


    Headers

    Imports

    Sections