Comet[.]exe | Triage

Sharing

General

Target

Comet.exe
Size

2.7MB
MD5

2962f9627a2c0f6c1d3c4d483b1715fb
SHA1

2727075146d6139bb5c4d1450cf8ec3d2c2191ab
SHA256

a99d0995384a3b5e72b5310922b4cdad92af15ffa40b572412e9fc4e9dff22f8
SHA512

b2487d168b64f69b934086c5be25db9f2c36f5e541bbd078492232f868d86b5a3b23712ac5a300efa7d9e6c92da641d452602824b5eb8280ea61f0573206c429
SSDEEP

49152:OTJ7bYkqXfd+/9Arbj9JLtHfHcTeCdEwvRwqFKzKwTOA5wxDL2u4EqP2oO:OqkqXf0FQLtHvqddkpOA5I/OnPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Comet.exe

Files

Comet.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Doubl\Downloads\CometExecutor\Comet\Comet\obj\Release\Comet.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ