General

  • Target

    JaffaCakes118_eb242dbb64c456f3b514243d502af2f7e489bf118d32b38eec122e50acb389d3

  • Size

    1.3MB

  • MD5

    332689eecebb6efb192ba3e971ab1e3b

  • SHA1

    1c53f5a608d2d55a110d2b1aad9faeb68f799fb6

  • SHA256

    eb242dbb64c456f3b514243d502af2f7e489bf118d32b38eec122e50acb389d3

  • SHA512

    bc4521fa1a5e1f369c6480552f8bf7b0f6b61bd0a05181bbb40239c55e38881d6eac8813b9a7c045ea6c0009ad79253e38debec7c80bcbff6a9146e4f2676137

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_eb242dbb64c456f3b514243d502af2f7e489bf118d32b38eec122e50acb389d3
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections