General

  • Target

    JaffaCakes118_e1c89ab7e7ecf7e81e8f15c1b67c45faa8ee7e7b464c01377c3e4e37151e1792

  • Size

    1.3MB

  • MD5

    a936cdd9e83bd405c19db9ace56916df

  • SHA1

    c0a5fa8b3d88b1c91d3f3e2aa8446a0aa07cd239

  • SHA256

    e1c89ab7e7ecf7e81e8f15c1b67c45faa8ee7e7b464c01377c3e4e37151e1792

  • SHA512

    a2e12ede28d69595c436f7642c8024a907cfe9aa9e8a8ad8116469088cdfb2e2ca328f1f50e090e5a877447ea9c20297c38a25a1338690115620f7003bb78554

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_e1c89ab7e7ecf7e81e8f15c1b67c45faa8ee7e7b464c01377c3e4e37151e1792
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections