General

  • Target

    JaffaCakes118_951380a32786bfa1415fa4c01c24d9c0f130a9f248ed9d0e03cfd95cdb453c42

  • Size

    1.3MB

  • MD5

    431ee704cf04cd1fbf267f4d835e47fe

  • SHA1

    cbaf204ae8426f3cf935b5509a33d9c01bc1f0c9

  • SHA256

    951380a32786bfa1415fa4c01c24d9c0f130a9f248ed9d0e03cfd95cdb453c42

  • SHA512

    b472bd1ace9cc7e47f8979a93d7dac7ee512ee3885454b8854828ed6cb348bc5e5c7fcc34df0aab13ca0101a8ca26ab20af0ad3de433b47ec40d49c067e12f31

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_951380a32786bfa1415fa4c01c24d9c0f130a9f248ed9d0e03cfd95cdb453c42
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections