General

  • Target

    fe0044fe7cacb5135445c2159e15f848_JaffaCakes118

  • Size

    72KB

  • MD5

    fe0044fe7cacb5135445c2159e15f848

  • SHA1

    9889c298764603cd07daf6b45396a4a0c31cb035

  • SHA256

    d8173633f98587275c8b825bf54f998cdf2e4784cdd715d2a41ecb4cfbdb348f

  • SHA512

    fb3b09eb58b7606d5086ee8e5b394bfe935d1cc117645e69ba446d463cd04e4dbab527e114d68b54418e0bea0ac545703129b3ff50ed62396798752768563cc8

  • SSDEEP

    1536:I0R2FH28GC0Tkmo9uFLVBRhSR+MyiqO3Mb+KR0Nc8Qs:xwxJFmo9uFLVJChTqIe0Nc8Qs

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

202.170.127.71:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe0044fe7cacb5135445c2159e15f848_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections