General

  • Target

    eee7bb5cb3efbc340e11af8f27d09ad3_JaffaCakes118

  • Size

    67KB

  • MD5

    eee7bb5cb3efbc340e11af8f27d09ad3

  • SHA1

    cffd09cddafe88e48b229bb521111cd2ac98f35b

  • SHA256

    9f2ce348891dd7e2b0927838f9802a4451996da375654d6177039bc2cd7d89d9

  • SHA512

    1ff389aaf8c7b184b8a930149e29fe3d657488407fada8635fddd64c06bf738a5f278f7ab98ac26823877693a07673a674f4b6af5a52e7008be6ddd3f0a0da12

  • SSDEEP

    1536:5hTjLUaaHof1kmI0foMJUEbooPRrKKReFX3:jj4DofWmI0fFJltZrpReFX3

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

68.67.49.238:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eee7bb5cb3efbc340e11af8f27d09ad3_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    419c3fe8c1eefea9336b96f74f0951dd


    Headers

    Imports

    Sections