General

  • Target

    JaffaCakes118_787ec42a2f3df91c682501e7e9271673dae58e5981b4349f6c410ee96f58c344

  • Size

    1.3MB

  • MD5

    3bf1794a157df46ffe99af6521c68211

  • SHA1

    b4904e1cedb9ff933cf8a0b62d7930e141b7a873

  • SHA256

    787ec42a2f3df91c682501e7e9271673dae58e5981b4349f6c410ee96f58c344

  • SHA512

    ecf5fcc9d78764648feefd1c4d89ad56ef7df320e6ec17fa7e5f49fb2179788b146e15368546d78a1e24158291cb7fd56d2c2fa429c0cace10080957ac38c125

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_787ec42a2f3df91c682501e7e9271673dae58e5981b4349f6c410ee96f58c344
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections