General

  • Target

    JaffaCakes118_30b68e9f2ddb960e1cf7c748ead08563a022fdb8739a576756c865d30cf5e873

  • Size

    1.3MB

  • MD5

    4863cdeebfb31c9244ceb72bccb1a8e4

  • SHA1

    e67bf6bf27afbdfdd2e6308257cc3da5ebcef644

  • SHA256

    30b68e9f2ddb960e1cf7c748ead08563a022fdb8739a576756c865d30cf5e873

  • SHA512

    f9d7e87b15f4d3fca33a6c28088da3e9266187be70d75c7972cafec620792cf839ae988078d81d441c4a13c5c5cf52a6f32605c54ded525bd9d014f8f43be764

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_30b68e9f2ddb960e1cf7c748ead08563a022fdb8739a576756c865d30cf5e873
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections