darkcomet | de92fbec120a28b67b6889ec21f4be51

Sharing

Copy URL Twitter E-mail

General

Target
de92fbec120a28b67b6889ec21f4be51
Size 812KB
Sample240325-v6wtdaec42
SHA256 609d28163bc291bac0a6fed62a734b989eba03827df069f7aca7ee2872b3f3ae
MD5 de92fbec120a28b67b6889ec21f4be51
SHA1 55d18e5e0b2fdf22bf424f3b9f30fa323f608232
SHA512 1e0081d45f47e438cdd34f33c8d23fdab16e6711ae4e1d74cef1162764ce7cb48c419196a5b7866fef07f9a5383797a50ef09e2bdf244242865f8c7b2ea7b495
SSDEEP 12288:PaAchpWsuVtDnBsBDJIcynnC90levX4CuYf2D82T3s99+VHuNvr:yAEE3uBDhynCylQgi63O9+VuNvr
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

darkcomet

Malware Config

Signatures

Darkcomet family
darkcomet

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de92fbec120a28b67b6889ec21f4be51

File Explorer

de92fbec120a28b67b6889ec21f4be51

.exe 812KB

de92fbec120a28b67b6889ec21f4be51

SHA256 609d28163bc291bac0a6fed62a734b989eba03827df069f7aca7ee2872b3f3ae
MD5 de92fbec120a28b67b6889ec21f4be51
SHA1 55d18e5e0b2fdf22bf424f3b9f30fa323f608232
SHA512 1e0081d45f47e438cdd34f33c8d23fdab16e6711ae4e1d74cef1162764ce7cb48c419196a5b7866fef07f9a5383797a50ef09e2bdf244242865f8c7b2ea7b495
SSDEEP 12288:PaAchpWsuVtDnBsBDJIcynnC90levX4CuYf2D82T3s99+VHuNvr:yAEE3uBDhynCylQgi63O9+VuNvr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

649484

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

627KB

Virtual Size

626KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

34KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

52B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

115KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

de92fbec120a28b67b6889ec21f4be51

generic