General

  • Target

    e5d3c30ee38847f358c0ce488654573c_JaffaCakes118

  • Size

    15KB

  • MD5

    e5d3c30ee38847f358c0ce488654573c

  • SHA1

    059b001047308131a567b67ed96884f13b3abcf6

  • SHA256

    0d07e09f6be1890623c4931a6cb307238d883484fef1abce18956fac6677acdb

  • SHA512

    f8ede7ced87508103c75b641f07eb4b715962ea04e96a88e11bbd240110db832bde1ded388e56a69c1c5e0be1eeae9e39f18042536c94d0f3731ff8ccf7c3dea

  • SSDEEP

    192:IA0in0uwyPoy/nZ39K/jFEOJK4duOcPtPK+Lrn1PNvPDuvof+E5:IfkAsZ3UjGOBcdfrzHEof9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.6:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5d3c30ee38847f358c0ce488654573c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections