darkcomet | f0fc44b0c5abcecb98bfe9694f72a520fd86698ab2a00264f124f5aa64a4c619 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0fc44b0c5abcecb98bfe9694f72a520fd86698ab2a00264f124f5aa64a4c619
Size

9.2MB
MD5

11c39f218ff351925b48cac10509b319
SHA1

6226df06aa249ed2578f9d2b0d022ff5a47d44c4
SHA256

f0fc44b0c5abcecb98bfe9694f72a520fd86698ab2a00264f124f5aa64a4c619
SHA512

d1769fe01fae65342221f00620a8c64a4cbfbdf728568d29039f007730657c1c82e848f8e9f139d05cd23cf8184bbcf9c1e60b8164bdf8c35ee09a238645ba1f
SSDEEP

98304:z4zCcIZAyRD3Aq5WSFZyqBAc7c1KNK981ptXoyVacNPIumpSf0e/vOSKKPIx:cKZnR7AqSEMpupI6wc80vOSz4

Score

10^/10

darkcomet

Malware Config

Signatures

Darkcomet family
darkcomet

Files

f0fc44b0c5abcecb98bfe9694f72a520fd86698ab2a00264f124f5aa64a4c619
.exe windows x86

1673207c7fa7e970c9c210f2ba7caa4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord595
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord645
ord570
ord648
ord100
ord581

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ