darkcomet | b4b1351a6e1af3178f624f8578652911_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4b1351a6e1af3178f624f8578652911_JaffaCakes118
Size

710KB
MD5

b4b1351a6e1af3178f624f8578652911
SHA1

29fe755cea738942fef4264cd16b879aa2b0f3b7
SHA256

9aad3148f45891cca10578ba6ff524ca4773962ac3d094cf6604c25e1593a0ab
SHA512

1cf5693d2c9a6f92814a467435686a9ba505a5748f1df30055f16a64063f3925c91c9bdbbf10bf52f3c9f465e3ba682e376f2f00900ca64bd29f114d7689688a
SSDEEP

12288:wXpJVHMxtDaSm3TJvVNvWV5YTsY7tHwbz/hYfcoyoKENGz7lG/g9jApY:2VsWSm39NNv9wY7tHwbWfYoKECuhG

Score

10^/10

darkcomet

Malware Config

Signatures

Darkcomet family
darkcomet

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b1351a6e1af3178f624f8578652911_JaffaCakes118

Files

b4b1351a6e1af3178f624f8578652911_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 37KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024KB - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ