General
-
Target
JaffaCakes118_bae9f9071147411631f99d8313714d1978ebe3ddb24b3d66efbd780baed57ff7
-
Size
1KB
-
MD5
81cfac3a377fc6aeca86e16a86b388d0
-
SHA1
b2fd69992abc5b997c147a00b4b1163d2055be07
-
SHA256
bae9f9071147411631f99d8313714d1978ebe3ddb24b3d66efbd780baed57ff7
-
SHA512
2e31f19de0c374c546e14abec9bebb02301028778e6e6fbfd1b39b6e48d9973f81eeac2949bd5a288496e4d74db3042055cb8ea1233f7d51c18efda10496ddf6
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/download_exec
C2
http://175.178.239.127:80/comm/change/RDS3S6X8
Attributes
- headers Accept: image/*, text/html, application/xhtml+xml Accept-Language: ro-md Accept-Encoding: gzip, compress User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.82 Safari/537.36
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_bae9f9071147411631f99d8313714d1978ebe3ddb24b3d66efbd780baed57ff7
Headers
Sections