General

  • Target

    JaffaCakes118_0292673e7ad4efc8f077def06223b335

  • Size

    72KB

  • MD5

    0292673e7ad4efc8f077def06223b335

  • SHA1

    28d5dae38eaa488e3115ddaf95b7b27e70bed45f

  • SHA256

    f9698c40650f3e93d19287f3ef34d05d799a7f58fdb28ced36209d22c5b8b9d3

  • SHA512

    0a82e6bf6995ef362513d3680e353dd157c054bf36e9baab277408ed9a3bcd37d84a635dec680f119b04b9d92eb1011abcbfbbdf367dd32052bbf0b7c0e81fda

  • SSDEEP

    1536:IzOqo8gwdsahp6XivkS+LlDg8wBMb+KR0Nc8QsJq39:SOqo1VahpF+L9g8oe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.4:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_0292673e7ad4efc8f077def06223b335
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections