General

  • Target

    JaffaCakes118_b890754b74bb8e49cbf4d3a5b4569dd5

  • Size

    72KB

  • MD5

    b890754b74bb8e49cbf4d3a5b4569dd5

  • SHA1

    29bef8b8430059ac08894352a48666bdc9558303

  • SHA256

    3b955c84d26a3f53f157ccfb5a1c9ce4426972e5c9415982cdc5522b8e09290f

  • SHA512

    da54670e711cf7cb1222213f42420eec16f80b8fae8dd46d51c8cc80595319815f7ac7e2a34344706cfed433d401aff1562281d0e69766c4d94c376fdd8751c1

  • SSDEEP

    1536:IrUgTrQoiIEaUMNS4t7vyc42QC9vD7tBmMMb+KR0Nc8QsJq39:yU8xivaUM17vN42VtBe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.76.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_b890754b74bb8e49cbf4d3a5b4569dd5
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections