General

  • Target

    JaffaCakes118_ddabab58595d93a3defd6d065ebe6e4dcf870d1d32dd0bb8ea11d30bb4bdd902

  • Size

    1.3MB

  • MD5

    4c1c3ff3d9b065d0bd43ae34c4e00378

  • SHA1

    2293feb138ad72454f6e5f61a33456273aca7f4b

  • SHA256

    ddabab58595d93a3defd6d065ebe6e4dcf870d1d32dd0bb8ea11d30bb4bdd902

  • SHA512

    5208f29d3c466d06907e3f6125f7b7534bfb06d0a17bf7ef43266e6dcd52c9588bb690906868181026bf3057164363fb087d530d5ecfbc9683828b39db3e7838

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_ddabab58595d93a3defd6d065ebe6e4dcf870d1d32dd0bb8ea11d30bb4bdd902
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections