General

  • Target

    fe3a923be44c84946428582f6022cd0d_JaffaCakes118

  • Size

    1.4MB

  • MD5

    fe3a923be44c84946428582f6022cd0d

  • SHA1

    affce797af9cd59fb551778bee0ce8cc72d18f48

  • SHA256

    755a3a96c8e9e813a52944d5937914f5e80b92d297ae22fec7b9111d7c56e76c

  • SHA512

    f33b68a78a1af836786df85d09a9ec07a5b104e958924c6dcd637750aa3b77259b2b62c0b11573591c7dc7da0a8a1b670a18833672c90371032175c01fd9e85b

  • SSDEEP

    24576:58TJtpd95n1HCEei6gFT/L+V3F+kyRejskFL/whBZhnHo4Sad5RKra0zBd2ew:2Jtpx1iErFrLK3F7QojUnHo4Sa0ra0bw

Score
10/10

Malware Config

Extracted

Family

socelars

C2

http://www.iyiqian.com/

http://www.xxhufdc.top/

http://www.uefhkice.xyz/

http://www.fcektsy.top/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe3a923be44c84946428582f6022cd0d_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    4f0608b5638c60342069764638589dcf


    Headers

    Imports

    Sections