General

  • Target

    JaffaCakes118_5b146551fbc1989f6abcefaf60ff31c0

  • Size

    72KB

  • MD5

    5b146551fbc1989f6abcefaf60ff31c0

  • SHA1

    f6ff71569b269f438a86cbfde5869ed7070b0c44

  • SHA256

    d5dc6324a98fc11e7d963fb06ff7e997d362e0ed5627830d8272569550bf9c4a

  • SHA512

    005b0f8c42aac6a82fb7191e4540531ac14c907ca4b1b38f5dac1694c36691e7c5dd74fb9a44d2dea7463aff19dc595dd94dd8a2fd4d358b559a1364f6e7e5a5

  • SSDEEP

    1536:ItO+vtfD0IdbPA6Ba0OMGqnkeOyBwHNMb+KR0Nc8QsJq39:YOOD06P98j/HNe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.230.38:8989

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_5b146551fbc1989f6abcefaf60ff31c0
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections