General

  • Target

    2db2d1e98d33b70706c87d59f14b6e00_JaffaCakes118

  • Size

    72KB

  • MD5

    2db2d1e98d33b70706c87d59f14b6e00

  • SHA1

    ccdd18d5e4a20fa676998f368d0dfb50c82d161d

  • SHA256

    6460cf38aaaf16833ceaae59e967b99112e33a6a8af43d6b4178cfb8692aefe6

  • SHA512

    09ff44a5a8636f14ed1f9e6016182e78c1679e57b6fdfe43d0f1204cf153154ff44eeb44e8922f8b1a814f10483ca917e6656a234c52454b3a1dff0361c5e6d8

  • SSDEEP

    1536:Ic9gCOy/nqPAfMEw8kDjXBNQMb+KR0Nc8QsJq39:TvOcnu57D7oe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.163:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2db2d1e98d33b70706c87d59f14b6e00_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections