General

  • Target

    JaffaCakes118_489db0fd2711385a0e2f08cb81eb2a3c75f9372b396e71895fa635ae3226e484

  • Size

    1.3MB

  • MD5

    8e270d3f5b663d52011ddb690db13f2c

  • SHA1

    bca20fa3af5792fa2be356018e2b1e56cf3c2ab3

  • SHA256

    489db0fd2711385a0e2f08cb81eb2a3c75f9372b396e71895fa635ae3226e484

  • SHA512

    cc3c45b32b7b6b4cdff64099096d5acf9dfe3693c1cf97a172425a8f540133d1946127a20bb4c24662cfb88b2ce98c778aaa42e3e7166188ba8ec2b1f827f8cb

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_489db0fd2711385a0e2f08cb81eb2a3c75f9372b396e71895fa635ae3226e484
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections