General

  • Target

    1dfb82f2b5c2d45afcc9a4d26d7d9b3d_JaffaCakes118

  • Size

    64KB

  • MD5

    1dfb82f2b5c2d45afcc9a4d26d7d9b3d

  • SHA1

    1c83f0eb92a22b10fa3f9242e507010101288326

  • SHA256

    5129d60ff85264f77d85efc19ef40981e9a9a33b7b020eb3885541a7194b2cec

  • SHA512

    ba89eb94e83cb483ce86dad68bfdfcc961172863c15fc5952bdb375bbad10f9ac0df3285d5a0b49f2518ff38780fb8b7b852645e49d14190e624f2beb545145f

  • SSDEEP

    1536:rd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:bdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1dfb82f2b5c2d45afcc9a4d26d7d9b3d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections