General

  • Target

    JaffaCakes118_bb55ff34ad7785714d39c7b98c01ed9c

  • Size

    85KB

  • MD5

    bb55ff34ad7785714d39c7b98c01ed9c

  • SHA1

    2b081b5a8906e115d7bc091fd5fbb4d7f4b67992

  • SHA256

    91f7d9101481479efdf24ebd114b4fc943b5a7f1ab1efa4f8537485e14f68b5d

  • SHA512

    604027acd8b065a1c2c9df3edec6f4fe824c8264f986fff8ccc777ef6d0df15e45c1ca39c0632a139cd4afabe73c5f2357bbfd9156ff8b5c2ed09a143ed3154a

  • SSDEEP

    768:IUvCkLUfrU6cLDdj0qqbhjtOI8pp6F4KJe6R4ZU9qZU9y:IUTLu6zqb94+R4pl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

75.185.160.48:31337

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_bb55ff34ad7785714d39c7b98c01ed9c
    .exe windows:5 windows x86 arch:x86

    2070fdb7ac73ede50bab407619a72541


    Headers

    Imports

    Sections