Overview

overview

10

Static

static

10

97d6886673...18.exe

windows7-x64

10

97d6886673...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97d6886673d8a03075fef3ae49b8fd4e_JaffaCakes118.exe

  • Size

    72KB

  • MD5

    97d6886673d8a03075fef3ae49b8fd4e

  • SHA1

    6d3885bdfb004eebc555c5d1d50e2908902f1474

  • SHA256

    5413bab647dbf6d7fcfec8db44d2e0bda8ca1b83fb19d381a3cd03e37a417664

  • SHA512

    d836a6b81f71407e0f641714f1b757961c792acac032931dbb66c17875e57e4c8bc9ad997ce796bd3165f138debc52e86434bee982f2f73bd6b82a014584a077

  • SSDEEP

    768:8MEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:8bIvYvZEyFKF6N4yS+AQmZTl/5O

Score
10/10
neconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 97d6886673d8a03075fef3ae49b8fd4e_JaffaCakes118.exe
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections