General

  • Target

    9f2598c5a765ef9277074b4c4cbb3688_JaffaCakes118

  • Size

    72KB

  • MD5

    9f2598c5a765ef9277074b4c4cbb3688

  • SHA1

    d80fd211e371ce58ea898101003185ec88e4c937

  • SHA256

    b8603aebabbab7fe4e5216ab583e59ded4e67dee5bc18a172bcdf0b66863c1d5

  • SHA512

    089325569e2ed3dbc11b09dfae28edb7ffb4b5f191742e105b956993719afa2960b24df2b8328ed1d7ec0ea5b82d24943384c4da2428e45b4ab8ab229d2c049a

  • SSDEEP

    1536:IXi/ymLti6JtAVIWXZMXeobMPMb+KR0Nc8QsJq39:P/BoZVnogPe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.10.169:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9f2598c5a765ef9277074b4c4cbb3688_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections