General

  • Target

    bbd7e2d2b9ce3fe97bf7d5db68ce790f_JaffaCakes118

  • Size

    72KB

  • MD5

    bbd7e2d2b9ce3fe97bf7d5db68ce790f

  • SHA1

    3c2805c6b59fafd4a3a6abb28164d000d16cb9d2

  • SHA256

    5940f887ac4bf338956ea74a1011a8b14f2484110b828b6f59e983220498c1af

  • SHA512

    d25f4a2aabf6a893abfff2c55994a0bda7ac5b46008ae0c17b86ee6f2634818a09222ccad6c0fa444eb58b51a7c43b59ed04db24436dadf223af18338b4928e5

  • SSDEEP

    1536:IJ7WXee/I9oPDYsPOKCPB8zrJ9gZP7Y/Mb+KR0Nc8QsJq39:qyueEoPDPmKCPmvJCke0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.0.0.10:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bbd7e2d2b9ce3fe97bf7d5db68ce790f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections