C:\Users\root\source\repos\process_hollowing_poc\process_hollowing_poc\obj\x64\Release\process_hollowing_poc.pdb
General
-
Target
JaffaCakes118_04a853af099364ee614a404ddde343f3
-
Size
7KB
-
MD5
04a853af099364ee614a404ddde343f3
-
SHA1
c9a4dbd8aebff80b98e110310e454e6fb7546c78
-
SHA256
7e86929223da73cf275e38a0257e34bf64c690b6e5700cf1d120a23414c62495
-
SHA512
27d5118603e8b44b54e32f1ca0fc8d9428ffb8251403a04bf0694488b9e1cb3adb3d1997e8c15cba7c3d75924876693f2b82a6f3f520b421821f58288df194a0
-
SSDEEP
96:bz4a48MRZGbWrW60c7SNfBh+MhpYfgFF2cNoNfi+Py5YIo7aio7yHo7Vo7vzNt:bz0eW7n74fBQEhHrNoN6+TIy3HGq
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
metasploit_stager
C2
192.168.50.227:443
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_04a853af099364ee614a404ddde343f3
Headers
Sections