General

  • Target

    efb5ac936f69115a770735e8deb98b31_JaffaCakes118

  • Size

    72KB

  • MD5

    efb5ac936f69115a770735e8deb98b31

  • SHA1

    9da3f77a85354dd458152d13a3cde93c811c4715

  • SHA256

    139c09061fb34183d0ba01a5b0aded81016eefad9d38ca46dfff0c5666695cef

  • SHA512

    546b49a5acbf5076d6ad5a07df4116a9edc78ed092dc8ac6dafb32ad51d376cb31dea04251f82e8ef41afb0f37065a5b32922e04b7d4d9da464c6993f0ced760

  • SSDEEP

    1536:IW83PZKe3d2RBFjKidWDRmuovNrMb+KR0Nc8Qs:n8RT8RfmfDsVre0Nc8Qs

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

85.228.105.46:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • efb5ac936f69115a770735e8deb98b31_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections