Extracted

• • Target

    352332e97d5158b0786e90103114c97a_JaffaCakes118

  • Size

    932KB

  • MD5

    352332e97d5158b0786e90103114c97a

  • SHA1

    d2124babc2f68fe3d05184e08f59e2314c11194f

  • SHA256

    da5d9b64e1993474890067eab17fab23d8749de89deb153ec92b53300ab3fa22

  • SHA512

    767140afd557f6fe112cffb1ecca4cc00387206d3ad4d60fbb25d67fb040af8076d612a4a710124ef44f921f9b39f5b5e5efd2e3bbb72b09a2c51a0e281430f3

  • SSDEEP

    12288:pkVH/5qpEzBbCU4y9TL2EkHnEzgFXvB9DCuHxFQO/Jn8xgLPNbFRPhb1gnzR32aC:pkypEVd9jU9HLQqx8k13uj95m6bHKQ

  Score

  10^/10

  darkcometlatentbotrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2