General

  • Target

    c7713930afd7b0bf7990e118f4ca08cc_JaffaCakes118

  • Size

    101KB

  • MD5

    c7713930afd7b0bf7990e118f4ca08cc

  • SHA1

    a3b5d151359ec785fe8dc63d39a87d89ecefb3b2

  • SHA256

    ae2763e81b123a51697e9d620a96bdda3c12db9985c413d169ee891e15ec1e5c

  • SHA512

    ca04a36af0cc3991f9f14c19b066682aa1e2c3175587666c48c62031bf1dcfaf378adb499848e006840c19fc4a8e1e2a8280ec8e626ad71c350ce1f6fd51ef3a

  • SSDEEP

    3072:qm/lpgHzPkWM9cCzTazHDfmsnzef1PqLg0YVQIIqqHqF5:TeIWMneDf9efCxHM5

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.31.210:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c7713930afd7b0bf7990e118f4ca08cc_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    8646ba147d53639abfde5f5b0095490f


    Headers

    Imports

    Sections