General

  • Target

    JaffaCakes118_fefe964d083cc9aaf22ae6b31e6ac62c6a9928c3b3901895fcfc749055f8f9c3

  • Size

    1.3MB

  • MD5

    76e296446f83da9d2f3f531a5f77a344

  • SHA1

    cca0c587bfbafd87e2263e4ebdd23f18a7a38c05

  • SHA256

    fefe964d083cc9aaf22ae6b31e6ac62c6a9928c3b3901895fcfc749055f8f9c3

  • SHA512

    ecbb6de0ec10355d0d197404de42b1c6e8904893dd59cf6410d0080f9326aab7d519fbf9903cb39505b47972bcdb5843c67ba64e213f235396fcc7738d7614bd

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_fefe964d083cc9aaf22ae6b31e6ac62c6a9928c3b3901895fcfc749055f8f9c3
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections