General

  • Target

    JaffaCakes118_951869cc3e9765970e40b5d7f61d55cc

  • Size

    507KB

  • MD5

    951869cc3e9765970e40b5d7f61d55cc

  • SHA1

    7c585f3b8de25af8303846b909da0c3da31f1284

  • SHA256

    539cad32db796dbb382afe2950b36f600fc5c30a959cc9ebc1ffa2dae478b78c

  • SHA512

    4eb1438d2a20547914bc93dd7f8920da1fa6ca131d31cbcb59b864fa78381fc4d16e8eca8806160577f09a2c3c223ebf05e39d8663b0c45f7ff9ee7f462fa63d

  • SSDEEP

    12288:D5XrOWs0gqriTmLwk60Ye02vbjj7pRF21:NrOWs0gqrYmLs0YJ2vbj3E1

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.2.2:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_951869cc3e9765970e40b5d7f61d55cc
    .exe windows:4 windows x86 arch:x86

    393ae1647aee6373b1ed90950be4b4bb


    Headers

    Imports

    Exports

    Sections