General

  • Target

    JaffaCakes118_9d5ca71a3a24d9cd93b64c1e87f4419ce2b5d10e0a3d9a24a1f2fb275ecd81d6

  • Size

    1.3MB

  • MD5

    5465d6551d7cdf65279db7339ef37a5a

  • SHA1

    d655d790ef852b32204c37626e12c2e3ee29185f

  • SHA256

    9d5ca71a3a24d9cd93b64c1e87f4419ce2b5d10e0a3d9a24a1f2fb275ecd81d6

  • SHA512

    78b74633d0c9aa44060d973f9e7c6b159be87a4444ecf7430aac7eb4be374e5f7c0959091adf4356bfce838336ff191b1735d89197652d57d7ebf0dae508b289

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_9d5ca71a3a24d9cd93b64c1e87f4419ce2b5d10e0a3d9a24a1f2fb275ecd81d6
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections