General

  • Target

    JaffaCakes118_5bb95fe2c00759300cfbf2f0c7834c913f8d60c794ea6ec91f45cae65b5188ce

  • Size

    1.3MB

  • MD5

    661bfdcead5aeca6b498b98dfac9b47b

  • SHA1

    0d006f77e8aeb5343ec61fa9d29524131804a12b

  • SHA256

    5bb95fe2c00759300cfbf2f0c7834c913f8d60c794ea6ec91f45cae65b5188ce

  • SHA512

    09db637cafcf1a21622d5c93ae6a368e2a49351c93ddb95ab276091a5167b79d8674a398d9a4a5b864e4b7204be4ab576a9a066156ef2a1de0db33aad0717699

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_5bb95fe2c00759300cfbf2f0c7834c913f8d60c794ea6ec91f45cae65b5188ce
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections