General

  • Target

    0dce7aa730fecf95d5ccd586aae6dc3b_JaffaCakes118

  • Size

    18KB

  • MD5

    0dce7aa730fecf95d5ccd586aae6dc3b

  • SHA1

    a8a9d173d12be67c86ef80a54e1458a4bea886c4

  • SHA256

    755253d91e631aa986a2866d3b3992e385326625c1f873b118e929ecf0b5a05d

  • SHA512

    ca56bb1a158a84529e4d4b15c66854f8fb8202c094ca592afbfd86f8efebd40dcc5d490e14769cf8a3baa10af66eb24670a0eada6d4a876a1d12c778d86c5eaa

  • SSDEEP

    192:XqFHEfrGz/3yyTpvIhLPqSoKjeu6vEFKIjKCMF0:BrGz/CAxGrqSoKjKMwExZ

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.178.23:9999

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dce7aa730fecf95d5ccd586aae6dc3b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e0743f89d81df66a4b8aae0f12ec78e5


    Headers

    Imports

    Sections