General

  • Target

    JaffaCakes118_943ec7f4cd8f44c169609c6e4319941dc1b6688e0d635802337e2d8de0202b7e

  • Size

    72KB

  • MD5

    d2953c9af36d54e46a66eddf82a79b7d

  • SHA1

    460664b337eab37916e30e87605945f5ec554a9e

  • SHA256

    943ec7f4cd8f44c169609c6e4319941dc1b6688e0d635802337e2d8de0202b7e

  • SHA512

    4d9ebe463d15f49abd8c356a984f26fc033f68d13ab4f866265a3650d9f432d30359ee869a02c6b3411df31a54bb722bbdb4af7acf8247c93678111fdb1a0590

  • SSDEEP

    1536:I7HHyvsr2swCuom4h9FdGdNm0gWGR4Zdi9c2PMb+KR0Nc8QsJq39:uyv0IyKxnGki+se0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.10.10:1337

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_943ec7f4cd8f44c169609c6e4319941dc1b6688e0d635802337e2d8de0202b7e
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections