General

  • Target

    9a289831d5bd565672b646ae1b671e8f_JaffaCakes118

  • Size

    72KB

  • MD5

    9a289831d5bd565672b646ae1b671e8f

  • SHA1

    7bf4dc0208eaef14033cebeb9d86686ac105e986

  • SHA256

    bcec1f78ecc1f8135249340fc74abb72d50609beb97cf68b6cfa5a88bb6a414a

  • SHA512

    c85848fdea360cc1d64b8ecd024498ebc52f60fcc998eca360404723c115cab940f06649915574e5200c35cc911715f5c8fa528aab9a9e16631a834ef5c5c711

  • SSDEEP

    1536:IwvDHMptfvyOtDYnddGbLwx/RFhMb+KR0Nc8QsJq39:lvzMX3ym4dk8xJFhe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

80.59.116.204:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a289831d5bd565672b646ae1b671e8f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections