General

  • Target

    JaffaCakes118_4896fe9c5f16943cf1d47cf1029e4ccf317b811f7b0aac3f77ec53cf75df2ef2

  • Size

    1.3MB

  • MD5

    85bfeb89da4faf43dbf03e1bfc1e65ee

  • SHA1

    613fa3f36a79e9eb2f58e14296d807641d4ea19c

  • SHA256

    4896fe9c5f16943cf1d47cf1029e4ccf317b811f7b0aac3f77ec53cf75df2ef2

  • SHA512

    3e379299ff10d496208a3b445f1ecf87bf76e795ee386aac95486856d27bb443d02a00fcbe1e1206d18e717e7b275971305057dd59c414d67e7b152d3b06452d

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_4896fe9c5f16943cf1d47cf1029e4ccf317b811f7b0aac3f77ec53cf75df2ef2
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections