General

  • Target

    JaffaCakes118_b191cef3bd06983c6f824a959cabcc1be823e7d2d4cd8e6ebe3278c1fb8cc8a1

  • Size

    1.3MB

  • MD5

    b419a3fc2045123a2f5a136cc8196c2b

  • SHA1

    d4f9acc4a3fd6415a35262b2bf27ac1ac178777d

  • SHA256

    b191cef3bd06983c6f824a959cabcc1be823e7d2d4cd8e6ebe3278c1fb8cc8a1

  • SHA512

    e0caaf56193543d1ddd4acd886d153b210cc64d844e9ab69676f83b461dca2ef3f6853a461fb0bb2341cdbbd52ea3b7b1341c2f776bc09e0d47fc78acf98a97d

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_b191cef3bd06983c6f824a959cabcc1be823e7d2d4cd8e6ebe3278c1fb8cc8a1
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections