General

  • Target

    JaffaCakes118_6bbccf17aa51ce9f5a6d0118509cf6143ef98e44f42e2c3c5fc5076c2caa7225

  • Size

    1.3MB

  • MD5

    01b6f94735723cdc7fb235d4014c467f

  • SHA1

    0b1e73e0a71b13fe8e124bfca00ca0575c0e19e7

  • SHA256

    6bbccf17aa51ce9f5a6d0118509cf6143ef98e44f42e2c3c5fc5076c2caa7225

  • SHA512

    9bff84c869f84abcaf6471a65a07017347d69ffcbdc74fa873a9b14b82d5bd5aead77845e7f5e335cd10ff028edb1f6ff2077a8cb268a196cc056c8da67b830e

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_6bbccf17aa51ce9f5a6d0118509cf6143ef98e44f42e2c3c5fc5076c2caa7225
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections