General

  • Target

    JaffaCakes118_6499984ea5c0be30f28c8f2a20fc5bc0

  • Size

    72KB

  • MD5

    6499984ea5c0be30f28c8f2a20fc5bc0

  • SHA1

    535a86b70cee48adf6c96ab5856717dc490015e5

  • SHA256

    e645ba11ab21523271eb5c471fd4b025d999732977f9ddab04498caa1fd537e6

  • SHA512

    0bf34268e07151101b875838857a704d5156838efe335934cbcb57d0a5ecbc9bef8dd1581f8e0f70aacdc1b2b54b65651e417d658f1e38cf66cff0a6bbb49ccb

  • SSDEEP

    1536:Ield2Z6amVX1iQ5BTBj+rMb+KR0Nc8QsJq39:/y6aIFNkre0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.9:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6499984ea5c0be30f28c8f2a20fc5bc0
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections