General

  • Target

    990284a6257dbc1321dae9df064d4e2e_JaffaCakes118

  • Size

    72KB

  • MD5

    990284a6257dbc1321dae9df064d4e2e

  • SHA1

    249a027a5348cb7211ed07b08278eef3ad4aceef

  • SHA256

    c5a458b555f9adc02520a82eb5e84954d1d81262a4e55585f58715c2f33ba98b

  • SHA512

    242546a4f56e2870a03a27ef604e7a588fefeb2e76dc21ef85e1bbbfdc2ff256975d2bf07a1b3ca4311a2c61f885c4c77e105ecab487a134d8becaa85145abf2

  • SSDEEP

    1536:IPOoMt+fJz8aE9QH69onzuEbR21DMb+KR0Nc8QsJq39:mOoMt+fJdEk6iudBe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.1.2.146:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 990284a6257dbc1321dae9df064d4e2e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections