General

  • Target

    JaffaCakes118_ff49e72ad68a412debd2d538c47914b5

  • Size

    68KB

  • MD5

    ff49e72ad68a412debd2d538c47914b5

  • SHA1

    4d2e6c367834f0e9cf0ee393fbf3ab2038fbf89b

  • SHA256

    ca252b3cf3a4886d723368026ab0fbb29c0a469158cedee9c74dd0c08498c9bc

  • SHA512

    c03621f31ba7591b43271d906ec7e0b97084fd442e69a3b7062ab6eec4c0f4e4d1c2585042167725eef3a07aa96f6ad1a931ccefff378bf04dbf4d56196c7998

  • SSDEEP

    1536:7d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:LdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_ff49e72ad68a412debd2d538c47914b5
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections