General

  • Target

    1761018eeaea7c9084b2e321775a81c6_JaffaCakes118

  • Size

    17KB

  • MD5

    1761018eeaea7c9084b2e321775a81c6

  • SHA1

    e079d20bfc0b21fd063eaabbf7a8678ae92174bf

  • SHA256

    b83564d15f58c928fb7c69c2396ecaf4b2f2983f8d5ca4052fc5fa1f00d709fe

  • SHA512

    b3915bccf6dedc7ad82893ffb8ac6dfa644b1ce0338375862bb684fcd8247418263081e44a34959bc576a25c059aaf8c321da27e3f16bea91343530729983d6b

  • SSDEEP

    192:hIA/CJwTieIHmYZzneiW7FqIOzZDWNPPMiwvXZFgeroC4V:6QCJwuxmCKiWwI4DWdMzBqerfi

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.10.136:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1761018eeaea7c9084b2e321775a81c6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1470a0ba50e09d10917bc409c9f0af94


    Headers

    Imports

    Sections