General

  • Target

    abac2f80077d54341db8eb98f0c50398_JaffaCakes118

  • Size

    11KB

  • MD5

    abac2f80077d54341db8eb98f0c50398

  • SHA1

    4e9a7ecbda03c9c4e72517953a4884bf694da99b

  • SHA256

    e4475efa009302eb58ba77d6e99d1d253cf753d77801318efd6562f7e150fdb4

  • SHA512

    fa061cc4958751529a3f476df8d9196818e005adcbcd43f0521f16b37c4debbfed3abc15707856f4a0a2afabb80585322cff537873f1949afadfd833a58a9bec

  • SSDEEP

    12:VtGSGK4d//UHwGlIFWVd2UROmDvLCo9pFtMaF90exkJemvpY2GulBM5B:VtGStCOlhF9DvLdFtbP0L3pbG1B

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_nonx_tcp

C2

192.168.1.7:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abac2f80077d54341db8eb98f0c50398_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f9ade0aa18f660a34a4fa23392e21838


    Headers

    Imports

    Sections