General

  • Target

    38fa84301fc967d9a0e5e78b4036309f_JaffaCakes118

  • Size

    72KB

  • MD5

    38fa84301fc967d9a0e5e78b4036309f

  • SHA1

    30c05f05d6ebcf15b2a64e0636a9844db3d1902b

  • SHA256

    9be28bc7d0d240e29e3d321f9d952aebe0ea99db041990fa13af00846ccd6abc

  • SHA512

    59e8ee58ebbdd6eba161780c49441c5bd17dbff043f19b907d9dee8f31bbd75028c4712c9d0def9683d78c0c553bed88cacc079851cb10e0cc0f2ebf3981f337

  • SSDEEP

    1536:IV7HX8HlyQAmZRItGxcIe46lY8L5WMb+KR0Nc8QsJq39:+j+nK2cP/G81We0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.193:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38fa84301fc967d9a0e5e78b4036309f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections