General

  • Target

    1cbae77fda70faaccba575f213338366_JaffaCakes118

  • Size

    79KB

  • MD5

    1cbae77fda70faaccba575f213338366

  • SHA1

    d9bc148d1d55fe57849a718b503de85044a61cb5

  • SHA256

    ca5c886a113227ff16c3f270e2f5977f3b23350382b2ca3c9db54b11195a29c3

  • SHA512

    4c14923ee42637f5b898cc20a1353dca12544bd4b275a925f72f0e3aa1faed7100aa08b30511f7f4ddd2015bb0c20ec7353401c267858168f15ae87561f785c7

  • SSDEEP

    1536:Ii5GCUfnEeuq/LSph+lBUAL+mZf3OvavL4UoMb+KR0Nc8QsJq37:1euES6lBF+mwQL4De0Nc8QsC

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

84.162.207.18:1988

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1cbae77fda70faaccba575f213338366_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections