General

  • Target

    30cad29a59ac340db201eeeff45ebdd5_JaffaCakes118

  • Size

    1.4MB

  • MD5

    30cad29a59ac340db201eeeff45ebdd5

  • SHA1

    618e11093f8445ae1ac096d9fe68f0e7afb1431d

  • SHA256

    9daf6dd041934892100ae2edf69e27db7b2baa0ba22ce101e7c6fdfe179de5c3

  • SHA512

    33ea1643df24bffbde854aad4f3b261e9565420e7c0f9eed49460740e927ebf859d16ba077e26fea531599191d1396a3b9d834b1272eccc5b86b1e62406dd54c

  • SSDEEP

    24576:NxpXPaR2J33o3S7P5zuHHOF26ufehMHsGKzOYffEMSXkduZ1H1:3py+VDr8rCHSXuuZV1

Score
10/10

Malware Config

Extracted

Family

socelars

C2

http://www.iyiqian.com/

http://www.hbgents.top/

http://www.rsnzhy.com/

http://www.znsjis.top/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 30cad29a59ac340db201eeeff45ebdd5_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    d69e4c13e25f0ad622344ac56118c0df


    Headers

    Imports

    Sections