General

  • Target

    JaffaCakes118_17d41a40640026423bc9fe64287e6d21a802ad09b4ae7e4291cb99fbdfc1b1a2

  • Size

    1.3MB

  • MD5

    865ea75d11010df558eab5ef840c565d

  • SHA1

    3c077dafd0dd1c2722ce9f73f61ed82014b47660

  • SHA256

    17d41a40640026423bc9fe64287e6d21a802ad09b4ae7e4291cb99fbdfc1b1a2

  • SHA512

    2def6aa8ccfbf181e50aeebd2c54c9dcf94c42d753ea2ef2ddc055b83f93b926f2ebd6d38a9c7ec8245047ec64c60f306ff4d84fc0296e00d58a71a82e6ba2ef

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_17d41a40640026423bc9fe64287e6d21a802ad09b4ae7e4291cb99fbdfc1b1a2
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections