General

  • Target

    ef2aafce52278dbd883ea1d0802e194a_JaffaCakes118

  • Size

    72KB

  • MD5

    ef2aafce52278dbd883ea1d0802e194a

  • SHA1

    2f0130319cfd95713ea244cdc62c2e30b78a9dc8

  • SHA256

    4db1cd727e7964fc67adfc88644521f1e00ae0581d009fe626b4076542b0d874

  • SHA512

    88fc86e1af01a35d7adae09f514dfec47696ca483ab3ecbef422faf3085149600d6ad31c771deb5d750ce3b81684a16ecf41b9c6bc2fb54ddf81f2751712c035

  • SSDEEP

    1536:IBUa9ezleD1O+DSsH//O3Mb+KR0Nc8QsJq39:Y9CleD8+DSse3e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.45.132:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef2aafce52278dbd883ea1d0802e194a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections