General

  • Target

    8b9d6c540600fac64fdc766339dd4531_JaffaCakes118

  • Size

    7KB

  • MD5

    8b9d6c540600fac64fdc766339dd4531

  • SHA1

    34a2fa35125ec675a5387e63a7540223aaf3801e

  • SHA256

    24e69262a8f13497eb51d12a14f0ae8723b93930303eba4d19cb8dbeeccbb4ce

  • SHA512

    0a81cffee4996ed59fb26f0ad73d3d2d328cb37ab268bdc4111fb0d19603f75eda4befad4580473ac198a294815aabbcea7a7af1eba2b4c8f56f2a92f3e6ddd7

  • SSDEEP

    24:eFGStrJ9u0/6UQnZdkBQAVoaYNq9KZqGaeNDMSCvOXpmB:is0pEkBQVts9JSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.0.3:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b9d6c540600fac64fdc766339dd4531_JaffaCakes118
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections