General

  • Target

    5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118

  • Size

    6.6MB

  • MD5

    5bfcd9b06d57c79a788db9bbb9ab0f1b

  • SHA1

    14de5ec565c625622d2b039898158f8b4b9980af

  • SHA256

    1e102bdc029c12f0e597d8676b5453cd785bf389c281f777a257efd46f09c2d7

  • SHA512

    1ba207e3a44dceca079941dba61af1d665f81b04b2ca8a3576fe49d772ae936b95136b3fbe9065c015d35f807ec540ef9d1c6a5549964b84f1d7319d1fc22355

  • SSDEEP

    98304:1tTOy/2z7Y9FDxz3ETXwLpju5khqtSaJ8vixbB+pQryqUd:PP9Tpu5khY8vE+yrNs

Score
10/10

Malware Config

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
  • Orcus main payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bfcd9b06d57c79a788db9bbb9ab0f1b_JaffaCakes118
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections