Overview

overview

10

Static

static

10

1612f102a4...18.exe

windows7-x64

10

1612f102a4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1612f102a43924196f6c67852264eee8_JaffaCakes118

  • Size

    1.1MB

  • MD5

    1612f102a43924196f6c67852264eee8

  • SHA1

    49b0ca8d344345a84622d020b1b8d4057ab02868

  • SHA256

    cd7d786f6ffe4622aad7f8f7bba9de05c09cf37ed9a4c21a398e92808bd13d35

  • SHA512

    f32d5d110ac8c1356a70fe204c9e12663db2df4f35943532d81b277d597b28da92ec8550957479cb1a070564e8518839469a2a2dac4477b60fa1a203e5b371d4

  • SSDEEP

    24576:vJ2zljtfM8zCxqY3+SiSals+S5WhqN7+4:B4Zle+SIqNq

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1612f102a43924196f6c67852264eee8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections