Extracted

• • Target

    JaffaCakes118_d75a04d6e629d317d8bd7881fc025ab7

  • Size

    128KB

  • MD5

    d75a04d6e629d317d8bd7881fc025ab7

  • SHA1

    bb8c8cb41462a770ae9fbfa4b3eb88bd699a55a0

  • SHA256

    7dab809e526e284473e5a67bc1593314f11341536d1bf7986ed9f96a7bbac1ba

  • SHA512

    faf3b545beeef1d2379ac8b1ddb9bed4adee3b1f0c4dc0c49b07a0cbdd6889dd3f30d7124b61a012058d3d0fb4b50210ac031e6a19df05ecb365ad3bde89cfde

  • SSDEEP

    1536:wDfDbhERTatPLTLLbC+8BMNZg3mqKv6y0RrwFd1tSEsF27da6ZW72Foj/MqMabau:miRTe3n8BMAW6J6f1tqF6dngNmaZrN

  Score

  10^/10

  neconyddiscoverytrojan

  • Neconyd

    Neconyd is a trojan written in C++.

    trojanneconyd

  • Neconyd family

    neconyd

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2