General

  • Target

    d0e45ee658592f09f3abdb34dcced6dd_JaffaCakes118

  • Size

    2.1MB

  • MD5

    d0e45ee658592f09f3abdb34dcced6dd

  • SHA1

    cfc147d9d87d8f154ab7815c5e2e38dc5e7278b1

  • SHA256

    64c480d4049377b3d8cc823d1d0de9b097a5d79f0f78928132c33c1f7ee3bb33

  • SHA512

    93556d960a4b8e700ed0e2c0a0b354c41548c4063a374424d0f7f885a42bf4e680dca35324976b2718f076dff2cbc542e97bbad637e07c289ce862374d8c22af

  • SSDEEP

    24576:0dEZnpJkuEmcgSgRatXd7BJ4tkLUrUA44Cpvf4xAPIRGA3fVNgpJQ9873oW0CJ9x:sEZ43tzyIoGM08G6V/6NvyJy

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 2 IoCs
  • Neshta family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d0e45ee658592f09f3abdb34dcced6dd_JaffaCakes118
    .eml
  • Date_X_Pro_2.1.4_����_������_.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TestIQ.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • email-plain-1.txt