General

  • Target

    2c80085337c5bdc556fa21f222096c5c_JaffaCakes118

  • Size

    72KB

  • MD5

    2c80085337c5bdc556fa21f222096c5c

  • SHA1

    5438932f4341699a52e0593b9f24d47a231bcaeb

  • SHA256

    655c06b09ee17432e045cbf3682f597aad02b8996bdffe5cc6a8a51f4c0db03b

  • SHA512

    b8240e1a9bf04a574a6cc8b1b6f41dc80b59ad4aa0af380d0cdb2fd4105b15220c1bddad59292dfaaac1be7b728717c486cc6a83added8a413793a599e364dbb

  • SSDEEP

    1536:Izs36d/QIDRD8ah2HHvFiVv5i8qJMb+KR0Nc8QsJq39:gdQIDJ8S2ndko9Je0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

189.30.124.56:666

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c80085337c5bdc556fa21f222096c5c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections