General

  • Target

    b64f81de0ba358ec8020f486fc9237d6_JaffaCakes118

  • Size

    37KB

  • MD5

    b64f81de0ba358ec8020f486fc9237d6

  • SHA1

    b2400ee15d3880c5533cf04c1e6c684d129423a3

  • SHA256

    fffa687d090c8ff7cc1986b25f68aa2f9e9b15df3d901f5f0779836c697fcd59

  • SHA512

    af89d4f0cc52a8b1057635efb00067856b5fc055194398b441df640003cffd036ac1a776449350fc8a4c5fbbcc7250eec237ac96eb06c3d285be7bc5f1a3cc21

  • SSDEEP

    768:IjgaFZnWj1limItpGtzjpLDR6pzFL2uQ8mBHJgxe0VeoqZ/PzR:IjpFZnWizczlLrBHJ0eUefZ/l

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

24.205.5.129:100

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b64f81de0ba358ec8020f486fc9237d6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.