General

  • Target

    e92a1ea43fca2f7073281ce0cc8eceb6_JaffaCakes118

  • Size

    72KB

  • MD5

    e92a1ea43fca2f7073281ce0cc8eceb6

  • SHA1

    03778204d54b5524b9f5b1b9431a91e5788cb899

  • SHA256

    fb10a0aa828560f6ac492e3d26791a4cc68fa9635074ebec0377d0c4f0d27938

  • SHA512

    63ada191ec835d61b748600843e6d238db23a78594950e3bc01b4b52a38e450955b77899a2b807f8374f67e9c023cf755d0ec47aeb277f8ea37f6f615df3d79f

  • SSDEEP

    1536:IrjWq8vFFIo4AslgpsUjCojAK/8HHl1HmydMb+KR0Nc8QsJq39:gjHGFFe6+EhAU8nl1Hvde0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.25.43.36:1929

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e92a1ea43fca2f7073281ce0cc8eceb6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections