General

  • Target

    dd8a180147e1c65a971eabaf6fada174_JaffaCakes118

  • Size

    64KB

  • MD5

    dd8a180147e1c65a971eabaf6fada174

  • SHA1

    f0c05d23845bfb1389d6aa03f92d55167a0da41f

  • SHA256

    98ed1b9e649b9ce0c6c965ba20960bea71aeca810c74c768cc739ef98596e85c

  • SHA512

    69ec19722ae78f8c631efd0784b05015e5e81ccfef81a891ec0c5fc80542a2cb95b0fcb3b99cef107e6006eb4a5f52ca9df7df59e626a58af01d129383086354

  • SSDEEP

    1536:Ld9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:7dseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd8a180147e1c65a971eabaf6fada174_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections