General

  • Target

    JaffaCakes118_8a6e6303879a883c129058eb2e12c254

  • Size

    147KB

  • MD5

    8a6e6303879a883c129058eb2e12c254

  • SHA1

    462d28578f55169422f614574cc2a865c1c3b3d6

  • SHA256

    f82ac97791ac1557cc6c9e4e53daed6f744b833c2a21058fc2e3bb6da1853672

  • SHA512

    b4cf57c543a16d987cf83f1b38ed5a0abb4a87a18900adfed080cbcf16f576929f2986582ccce19d259ed777122e822d78fa0f0a4962167a8116b354956f27c1

  • SSDEEP

    3072:PHX8WGA74KRLZ2rs164xHeWB4xYPOIgpM:PHX8hAbd2rsh4K8

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8a6e6303879a883c129058eb2e12c254
    .exe windows:4 windows x86 arch:x86

    7be47655038ebd16d5bb5c1bfa0c0a1a


    Headers

    Imports

    Sections