General

  • Target

    fbfa11407f9e213d27ddbb455702e6e9_JaffaCakes118

  • Size

    951KB

  • MD5

    fbfa11407f9e213d27ddbb455702e6e9

  • SHA1

    0fbeb9136aed82425595f420a173c70561f54f16

  • SHA256

    f1abfc4444b595b6d0d3a7804c5cb18724e00cf8b80d2c73842bdf3e7c152b79

  • SHA512

    09cf834c3bf7425d9a55107dfc9f977692bd0dca13d0d4e293bb45ae42c7d45eafd119d1c07be56f33942b45f64a2f11de32f217d19ca74c14c642b090a6be20

  • SSDEEP

    12288:F69JOQaeDzmjntGmQsSSOwWjPEH8CS+K6u8uvuV:KJHTajnY+KP8uv

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fbfa11407f9e213d27ddbb455702e6e9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d7071e2290ece84239b36309ef08f03b


    Headers

    Imports

    Sections