General

  • Target

    JaffaCakes118_32c86669e13130f626559270d700b220

  • Size

    64KB

  • MD5

    32c86669e13130f626559270d700b220

  • SHA1

    e34bb4ee888e90fc93ccf17de7a94b3e2e0a5c10

  • SHA256

    516ee6f6a9ca8ea6b3107077c120a92713ce464971d821df7d30f202c7ad5790

  • SHA512

    e8be616e4c26fe1c2b57d659b744dec71e49ef15ec4dc9952c0b4b2de0afaadd4d2f17ebfb7e5068a60e5c508ef373bfcca9e7ebd8aedbebe0741b8d90a8b0fc

  • SSDEEP

    1536:Ed9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:8dseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_32c86669e13130f626559270d700b220
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections