Extracted

• • Target

    139304cb72f83bb7f7545169ffcf676f_JaffaCakes118

  • Size

    368KB

  • MD5

    139304cb72f83bb7f7545169ffcf676f

  • SHA1

    6511600a0affc92fa8d4b520b217fd6c1579acd3

  • SHA256

    164104f25938819d33de2b24d8c9290e17debe6f46f46ff7e4e981211772b202

  • SHA512

    bd797c2a6f9e849e1be5238a2a857dd6ba437d560a87576ad613e0a7f21370aa3ff2d1236a1bd149c26b5cb4d522b1a62c4b6c4c001544762b380efdc674a59d

  • SSDEEP

    6144:Zu2bEB/dQIdY8jgW/3G7fRNHNZJw9w5ZoNAYWHWz5Hn5qrJb+fkDlVSmmS:Q2bEBVQgT3CLJNwQ9rVA+N5

  Score

  10^/10

  darkcometpulifricirattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of SetThreadContext

  behavioral1behavioral2