General

  • Target

    f05f4b2ac33a02b90fc4839f141aaa5f_JaffaCakes118

  • Size

    72KB

  • MD5

    f05f4b2ac33a02b90fc4839f141aaa5f

  • SHA1

    15530bcc126fff81f8d5b2779258f310e7a6a7c5

  • SHA256

    c94e782657fbfee9df83aa7e852c7ad8854655b538fc704480d37bed746182fd

  • SHA512

    799ef71efea9dad1d2a0fd005f582890a527aff1b255c21dc2da3a42e977480b8b611ae6dda4c8182becdbb8ae856b673a9e13c5d1848ad8baab614292c161ad

  • SSDEEP

    1536:I2eMZOosI1o17bvzDOJYWBUZ1nbDOXMb+KR0Nc8QsJq39:d11SrDOybDOXe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.6:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f05f4b2ac33a02b90fc4839f141aaa5f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections