General

  • Target

    f62510ff74fbc90e78dddd2a541b2d67_JaffaCakes118

  • Size

    4KB

  • MD5

    f62510ff74fbc90e78dddd2a541b2d67

  • SHA1

    0e8542cb1e624da91b46bdc2d20fc8502eab90ae

  • SHA256

    1c772db34d6de10ddaae00dd5b039881b0153fd1b218a8da1eeefc4c9da00fc1

  • SHA512

    bbad7071eb3b47f7ea888c4c84e65e9f3e9097918430450a9b3f7c87ef5855623708961659a4c0fa90ef595dc16be9cbca2ba36894e0a0fb5212d3123cf294db

  • SSDEEP

    96:X+UzV6NDLzmfAGD350UJ1miJFtp9BEY0m8fpZsiBL:uUzQNfzEDp0UJk4Fj9ybfPFL

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp_allports

C2

192.168.57.133:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f62510ff74fbc90e78dddd2a541b2d67_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f9ade0aa18f660a34a4fa23392e21838


    Headers

    Imports

    Sections