Extracted

• • Target

    1685f9f177631069401f9171d815579e_JaffaCakes118

  • Size

    361KB

  • MD5

    1685f9f177631069401f9171d815579e

  • SHA1

    5f46cc862021e08f61d631c9a5b659e86c914546

  • SHA256

    38ceaf9208d380368e905a2eff1361ee6e524c834b9b22271bf2d3fcea26d72d

  • SHA512

    0a70bb0b3f657b3c17bb3d612908cc433813c13b0976efe76ca4867128bdea2d9412987b073bc51d49ee0830d550c1a25ebe700fb61ae4f9a8abc3326f0f08b1

  • SSDEEP

    6144:t67ShioBrtySaI0gmaWl9WrfqSwF26F63hOEWzVexj:tAh2Z9aFes9WrfqSwE6o30EWzoxj

  Score

  10^/10

  darkcometpuliferirattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of SetThreadContext

  behavioral1behavioral2