General

  • Target

    f1546f45748d0b766d7e879541c3442f_JaffaCakes118

  • Size

    72KB

  • MD5

    f1546f45748d0b766d7e879541c3442f

  • SHA1

    09d5984abc472079e3c3f373bf6e2e5e61c4fb7e

  • SHA256

    a6d1cc65c6acc5b0348908b30c0bfb71e4446588f6401abad68fbe945d535da9

  • SHA512

    a8a25b7dcfe12aca88c9a5eae43b563bf291f75af444e26e2f0c1aa6cf185c0bdf804d7f4dbc91710136ca500d689658039eadb800222fa9034dea9923eaa7a0

  • SSDEEP

    1536:Iz2yXxc1SdcC9Xci6kRxQHCcu2ZDCrRRPnMb+KR0Nc8QsJq39:s2yGC9XcDkrQHCh2ZerRVne0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.5.53:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f1546f45748d0b766d7e879541c3442f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections