General

  • Target

    e380a8df2ae905bc03a88d1afeb16333_JaffaCakes118

  • Size

    37KB

  • MD5

    e380a8df2ae905bc03a88d1afeb16333

  • SHA1

    6c909c4d17671bc46e36116a7c58f81eaefb5ee7

  • SHA256

    084b5a2d9f1d494f75abeaa78d9e67e384da66a314f12bcd1ab9a6cbfb885bb8

  • SHA512

    675fa6b58f29ace931e58137526140ec0c4f226b02bfbb9e0e6dfb1b674e4aa11d9eda7038dc53777c2415f36843713012109871c11b10cc53cfaea5eb768065

  • SSDEEP

    768:tVA9SMiB2BEefCUIFaqO7AZfqTqNPMsK8k6lRZ95x:DzF1ej7kZY4PMXEh5x

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

41.230.47.149:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e380a8df2ae905bc03a88d1afeb16333_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections