General

  • Target

    JaffaCakes118_6d91c5b19d31883725b04712ae31f490

  • Size

    72KB

  • MD5

    6d91c5b19d31883725b04712ae31f490

  • SHA1

    6e7af175c87b59a4164435020a0a9481839d3c7e

  • SHA256

    0d81bacd70a1bee5ce6deaad6c5a94293987f514933e03c64c1c67302b8f17d9

  • SHA512

    ea9da95963ea2947d7ef42b247b1d3e7b28969bb36acf896ffdac17ad06f63e716f9d2f3d42dc751b45a42a19f2fb737922b7faf81da59dd72ab5c24db57783e

  • SSDEEP

    1536:InbpduSmQ1WU5YKnLT6cpjB4dIotVlZsMb+KR0Nc8QsJq39:GbbuSmXOByzZse0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.8:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6d91c5b19d31883725b04712ae31f490
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections