General

  • Target

    JaffaCakes118_a6071d641845f00d647d2869a77dd8d7

  • Size

    1.4MB

  • MD5

    a6071d641845f00d647d2869a77dd8d7

  • SHA1

    39371220b3d9ebc702e8892b9c372f54c7341544

  • SHA256

    f811048b185a950026d917a0a0626efa1696605d0c8c483da268f4d92ea463c4

  • SHA512

    0e796c872a5f49ba7f22f90cf092f3c00e733d0c8491d06e868c3971fcae135735c7f10dc47cb5313ca761d8d5fcfc96f0db4439e7a3069f76764d43310792f8

  • SSDEEP

    24576:z2G/nvxW3WwL+zdHJ2zljtfM8zCxqY3+SiSals+S5WhqN7+4V:zbA3f+hp4Zle+SIqNqo

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_a6071d641845f00d647d2869a77dd8d7
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections