General

  • Target

    JaffaCakes118_42aab74dea23c3c0dc29e195400d08f9ecd88ee8275dde75a1e6dfa894186d1b

  • Size

    1.3MB

  • MD5

    28f00d04d26baa60ce6e213d8b52d964

  • SHA1

    2f47911528b29719cf19c866d1ced034cac38389

  • SHA256

    42aab74dea23c3c0dc29e195400d08f9ecd88ee8275dde75a1e6dfa894186d1b

  • SHA512

    c6bdcdc480b562b930dd3846595eb971e4dc91348fa736deafa02029e7413bd5a7b3ad5fe84440507f6b663b2483822234e566ee3dd0fef38dd2db138526bcf8

  • SSDEEP

    24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_42aab74dea23c3c0dc29e195400d08f9ecd88ee8275dde75a1e6dfa894186d1b
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections