darkcomet | 87378a5df1d40963010d2a05e4f852068490d3e90e5794ad8b3e8534015375e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87378a5df1d40963010d2a05e4f852068490d3e90e5794ad8b3e8534015375e4
Size

716KB
MD5

4e12176ba8f397087dcfbc6b036b1b60
SHA1

302e62a704eef925ae7cbf47118815be1f580a73
SHA256

87378a5df1d40963010d2a05e4f852068490d3e90e5794ad8b3e8534015375e4
SHA512

546a0f50fa2b402d9e5d2582d7e436a8e02d15b5c3adcdecd6e1c1eff33fb36b6d73284a19d1f91f08ac0cac0d1a3d7c812abb0b62cfef44386b2db60f3a2321
SSDEEP

12288:rXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452U3:znAw2WWeFcfbP9VPSPMTSPL/rWvzq4JH

Score

10^/10

darkcomet

Malware Config

Signatures

Darkcomet family
darkcomet

Files

87378a5df1d40963010d2a05e4f852068490d3e90e5794ad8b3e8534015375e4
.exe windows x86

b21cdd0db0884e9d970fe92330b4b9f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateProcessA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA
LCMapStringW

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 688KB - Virtual size: 684KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ