General

  • Target

    fdf2decec78e8537b9f65f36acf32231_JaffaCakes118

  • Size

    72KB

  • MD5

    fdf2decec78e8537b9f65f36acf32231

  • SHA1

    ea1083ef1e42f49eb36570b6665fa492d2c74277

  • SHA256

    198ce23bcaac69fd72485b6c38ae4118a599637d25019f435a48ac27fa59639c

  • SHA512

    bde4c32f4d57837b739ecf4296c062f84a588060d5b277d9b167c3467f518a1a2a4d000472f74df271a8725513ecbbee37fef79ffe3bcbda9743de66ae8289b8

  • SSDEEP

    1536:INt0cFHPhPlwMSRk+LXHCJj4uA5TorMb+KR0Nc8QsJq39:+HPHhAVore0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.81:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fdf2decec78e8537b9f65f36acf32231_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections