General

  • Target

    JaffaCakes118_c9e0e6fa8cb9d06b65714f29298e2c221eedb56d1b2f80772df4d4e6af9b9c07

  • Size

    1.3MB

  • MD5

    c8b598a84b9fa55ec1e06a0ecf64e3e5

  • SHA1

    5be38549419fb239173161b06812f7f58ca471a8

  • SHA256

    c9e0e6fa8cb9d06b65714f29298e2c221eedb56d1b2f80772df4d4e6af9b9c07

  • SHA512

    c64bf87dd9e9e3db6a23218e1f0cb7f635bb760d70348358cfa192f52762170f2b0feabdbd05efc9c944cbe24ad4abb4256d7bb9e7db41c6ab52109927f238b4

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_c9e0e6fa8cb9d06b65714f29298e2c221eedb56d1b2f80772df4d4e6af9b9c07
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections