General

  • Target

    af107fdfbcb1e6fa1e6c7660d5689f9e_JaffaCakes118

  • Size

    37KB

  • MD5

    af107fdfbcb1e6fa1e6c7660d5689f9e

  • SHA1

    dc11a7dd6675b414ddafe36a74bda303a3334e66

  • SHA256

    edebad273a87e1a1d20bb6b6855c29d09059880e77c18cc6cd655ba8a37c332f

  • SHA512

    f9d9422b754281e55996e17e49e59e11cc4f20ec755a3f0dbdedfb1d487a72c216b3bb8063dcfee677fb55df800f80f0238e1c064652cc2218cdbc332cbba521

  • SSDEEP

    768:pVWUSMYZ9hg/vIiJfO7A5cqL5NPMsKpu6lRZ95x:ns3ZKAkuwbPMXTh5x

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.254.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af107fdfbcb1e6fa1e6c7660d5689f9e_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    2e80c00d68efcf6d11ca6cbbc73bd947


    Headers

    Imports

    Sections