General

  • Target

    7330398e4bc7afd3740c804362ec8a99_JaffaCakes118

  • Size

    1.4MB

  • MD5

    7330398e4bc7afd3740c804362ec8a99

  • SHA1

    02fb96618ba3c6ce8d82b511883fa3d9b99ca935

  • SHA256

    17f36f9ac30e7ec160932fb3ef8efcc7ba779a63fe7e2510857a2e6d2909cb32

  • SHA512

    812fbf165de8c209b6eeb7e3aff11c1740f30d518329bcc78a472cebaee1e59c2b6c0ef3388aba53bb1901d3318ed9dc726c447a1009f74f98352ff4fedaf322

  • SSDEEP

    24576:3Rp2fYlh5hJYrsWSlTeTmvL2aIZX8W6jO2kkYOnbXgwpVg/:hp1v1jC5jNTOnjjp2/

Score
10/10

Malware Config

Extracted

Family

socelars

C2

http://www.iyiqian.com/

http://www.hbgents.top/

http://www.rsnzhy.com/

http://www.znsjis.top/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7330398e4bc7afd3740c804362ec8a99_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    d69e4c13e25f0ad622344ac56118c0df


    Headers

    Imports

    Sections