General

  • Target

    c097384bf358d9c9e421d39eb52a3c9e_JaffaCakes118

  • Size

    72KB

  • MD5

    c097384bf358d9c9e421d39eb52a3c9e

  • SHA1

    3b393be4d5909f21a2ea0246478cd81a0c52327b

  • SHA256

    b74447ae301ce722aeb67714d80c2fe85e81a4d4a78e2c6acf665371b1096412

  • SHA512

    517e2ba8fbb2784c17338cf0dfb6c3ce4918b8dee802e4f2593ea74d21dd1f1963888720c06e03ffd3a3ea5a62388d11859beaf037f4a6c7720cac1c6345e52d

  • SSDEEP

    1536:IeAHsAJMRGi1qG6or93F5JX6tEMb+KR0Nc8QsJq39:1AjCcMqA9X0Ee0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.14:31337

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c097384bf358d9c9e421d39eb52a3c9e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections