General

  • Target

    ffdc29b48cf5cd228193a668583fe8b3_JaffaCakes118

  • Size

    1.4MB

  • MD5

    ffdc29b48cf5cd228193a668583fe8b3

  • SHA1

    3e3ef5e4a4cecb91ebab9c975464b4cab7ce06fe

  • SHA256

    9389d1894d58d015aa930217beecefffc4fb10f7e277598701c09cc870f0a074

  • SHA512

    5504fd5502c92b6bd82e60ad3ba4c7d84749ad2c31e1a240305e0223004487c55ad5dfb3b9c6e00fbd92cbec8b24b47aedbf16968f516981df11dd112dd1938b

  • SSDEEP

    24576:mTj7ope1XnPzDuPxy3nyjmaRNKMZ8HhrFCKezRD+iFJSiPIm9DqzZea:+7opuPXuM3nomCNCBhCnhbFJSiL9Dq9N

Score
10/10

Malware Config

Extracted

Family

socelars

C2

http://www.iyiqian.com/

http://www.xxhufdc.top/

http://www.uefhkice.xyz/

http://www.wygexde.xyz/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ffdc29b48cf5cd228193a668583fe8b3_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    4f0608b5638c60342069764638589dcf


    Headers

    Imports

    Sections