Comet[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Comet.exe
Size

6.4MB
MD5

a93cd600f50cf562a7841b25c51b9b10
SHA1

c3952a6fa2bb77ec86fd5a7a15299f16c9ed7737
SHA256

c8b0924facd2303d4ece00db1c25ef9d8a7c5788a74c43df8a94b40299cc1d8b
SHA512

a42e412dd5d172f156609b4cc08ec88d71b7db8044f8c9adf588b35fc07956360cb64d7aa2b42b44e56219d0cd0c75428040d0a1c2df655e7cbb0b4c3a96796e
SSDEEP

98304:aFmsG+NP8T+h4VncCFNaYWNCLtlLM7MZtdQEs4QVts9No+APf7cmxF//+W:SDGceouParyFMmd3HsG9No+Oomx9/+W

Score

1^/10

Malware Config

Signatures

Files

Comet.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ