General

  • Target

    374bdef36f2da872fc2dae9b2e24151b_JaffaCakes118

  • Size

    72KB

  • MD5

    374bdef36f2da872fc2dae9b2e24151b

  • SHA1

    8d05ee094368fc7fba12c16c963d71e1307bc6e7

  • SHA256

    b1dbd4ec0bca990e851a5d2b2d6cb64cb3316917dd0d58c30c2f3fc3b9e76b72

  • SHA512

    858b823d624c028fd0bfaa4d0f3eb4a27ca9f17133d0d8e68eaca7c3ffff613b7d6f18fa3011cefdb43fc786c60afcc64175d7d3f1cfcfb0d558bc76524994cb

  • SSDEEP

    1536:Ig5co3w3tjBGZMEEf4YcI9/bBoMb+KR0Nc8QsJq39:D5/9EncQ/bBoe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

172.16.104.130:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 374bdef36f2da872fc2dae9b2e24151b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections