General

  • Target

    253a91133f812dfbe8ad71da44a0e733_JaffaCakes118

  • Size

    30KB

  • MD5

    253a91133f812dfbe8ad71da44a0e733

  • SHA1

    8c2f0c3d6b40ffd01f6bdb4c552e72938da8b631

  • SHA256

    7063942ccdfe323410d19da2c8b5cc642cc77247e113619ca92269fc68088845

  • SHA512

    c84279c410981984e00caa644d50d3e308eaf83450085208fe27e27f9a333adee295569dcf24e6388e909d0aa25d7122971a2943e1dbfb6e3609d54491cc85c1

  • SSDEEP

    384:W9R1EBiEC4t1cIAxbE9lY4a0kHhU2i0voiKpI3s9:y1EQ4Ii0vodx

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.10:4456

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 253a91133f812dfbe8ad71da44a0e733_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e42b01b26c0ec239cc2ffd11cfeb253f


    Headers

    Imports

    Sections