General

  • Target

    JaffaCakes118_272db942a9e824017bfce23c4de7cf84

  • Size

    99KB

  • MD5

    272db942a9e824017bfce23c4de7cf84

  • SHA1

    b36fb2682af4a80e755b8fa9a4220b1f41093835

  • SHA256

    fc4ee92309a76fb810ab78f3aa400c783b9bdb96ca3aad766b057e376e698a5f

  • SHA512

    9b345cd159a3b06f2377cb5dbda6458392878b0cbd963173b1b86ed7210891464866a195d416eb7ed133a9d869df66024fbf89449744d7d964a085892a4a5c9a

  • SSDEEP

    1536:cmiehVa6s2y1ma/XReoleWg6DoWw1xz5AUvMFMQiNS8RPhj:jiqUDNeN6DoWw1xdof8Rpj

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.43.163:1234

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_272db942a9e824017bfce23c4de7cf84
    .exe windows:4 windows x64 arch:x64

    f3cac4c1f6dc906ec53075f9c4880e38


    Headers

    Imports

    Sections