General

  • Target

    d01daf82d803ddd5965d75d70d456a37_JaffaCakes118

  • Size

    15.0MB

  • MD5

    d01daf82d803ddd5965d75d70d456a37

  • SHA1

    f47e2f2f18ddd9ff7bbe06215369422238a187fa

  • SHA256

    073f57766151019c3d39b80b47e431eb8b25c45fe4d9c7c795f679f4c332491f

  • SHA512

    2503ae35aaf2da6cb477dadb2df6820f895f491528ec276414de355208cc32accbf5a07ecd1f91286f4ee1430d0c52514dae8d7f852f71e57999767ead2db5f3

  • SSDEEP

    393216:mMNtT9qkAwEcHmqx/aW4av8+dNPCvZWvWy8za3/gExHodCcDfYwlv:9dAbcHmqaNav8SVCRWv78za34mHo8cD3

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • d01daf82d803ddd5965d75d70d456a37_JaffaCakes118
    .rar
  • DC RAT/DarkCometRAT531.zip
    .zip
  • Celesty Binder/Celesty.exe
    .exe windows:5 windows x86 arch:x86

    64c713842ab4b8dc212c3c8be646bf1d


    Headers

    Imports

    Sections

  • Celesty Binder/Lang/AR.ini
  • Celesty Binder/Lang/EN.ini
  • Celesty Binder/Lang/ES.ini
  • Celesty Binder/Lang/FR.ini
  • Celesty Binder/Lang/GR.ini
  • Celesty Binder/Lang/IT.ini
  • Celesty Binder/Lang/LV.ini
  • Celesty Binder/Lang/NO.ini
  • Celesty Binder/Lang/SE.ini
  • Celesty Binder/Lang/SR.ini
  • Celesty Binder/Lang/VN.ini
  • Celesty Binder/readme.txt
  • DarkComet.exe
    .exe windows:5 windows x86 arch:x86

    2494efc890c2356634d592bc26e3292b


    Headers

    Imports

    Sections

  • GeoIP.dat
  • Goodies/wallpaper_1.jpg
    .jpg
  • Goodies/wallpaper_2.jpg
    .jpg
  • Icons/againzip.ico
  • Icons/archive.ico
  • Icons/bittorrent.ico
  • Icons/chrome.ico
  • Icons/cubic.ico
  • Icons/emulefold.ico
  • Icons/facebook.ico
  • Icons/facedebook.ico
  • Icons/female.ico
  • Icons/ffox.ico
  • Icons/ffoxwhite.ico
  • Icons/girl.ico
  • Icons/heart.ico
  • Icons/idontknowlol.ico
  • Icons/limewire.ico
  • Icons/limwizearrow.ico
  • Icons/limy.ico
  • Icons/mov.ico
  • Icons/rar.ico
  • Icons/shareaza.ico
  • Icons/steam.ico
  • Icons/steamfag.ico
  • Icons/utorrent.ico
  • Icons/utorrent2.ico
  • Icons/utorrentfold.ico
  • Icons/viagrafemale.ico
  • Icons/win.ico
  • Icons/winfolder.ico
  • Icons/winmov.ico
  • Icons/wintool.ico
  • Icons/zipzip.ico
  • Plugins SRC/Edit Server Plugin Example/dc_msgbox.dpr
  • Plugins SRC/Edit Server Plugin Example/dc_msgbox.res
  • Spoof extensions/Spoofer.exe
    .exe windows:5 windows x86 arch:x86

    3522348ff9d086b792d82d1adbec5cc5


    Headers

    Imports

    Sections

  • changelog.txt
  • readme_help.txt
  • skins/ClearLooks-BLUE.skn
  • skins/ClearLooks-HUMAN.skn
  • skins/Crystal Clear-CRCL1S.skn
  • skins/DarkComet.skn
  • skins/Extensis-COPPER.skn
  • skins/Extensis-EXTENSIS.skn
  • skins/GNOME-Blue.skn
  • skins/GNOME-Gray.skn
  • skins/GNOME-Green.skn
  • skins/GUIRelax-CINDER.skn
  • skins/GUIRelax-SKYMAN.skn
  • skins/GUIRelax-SUBTLE.skn
  • skins/LE4-BLACKC.skn
  • skins/LE4-DEFAULT.skn
  • skins/Longhorn DWM-DWM.skn
  • skins/Longhorn Slate-Plex-SLATE.skn
  • skins/Longhorn Style-BLUE.skn
  • skins/Luna (Longhorn Revolution)-BLUE.skn
  • skins/Luna (Longhorn Revolution)-HOMESTEAD.skn
  • skins/Luna (Longhorn Revolution)-METALLIC.skn
  • skins/Luna (Longhorn Revolution)-NEON.skn
  • skins/MSN.skn
  • skins/MediaC-MEDIA1024.skn
  • skins/Mollis-BLUE.skn
  • skins/ONatural-BLUE.skn
  • skins/Office 2007.skn
  • skins/OpusOS-BLUEB2.skn
  • skins/OpusOS-DEEP2.skn
  • skins/OpusOS-OLIVE.skn
  • skins/Plex Style-PLEX.skn
  • skins/Plex Style-PLEXM6SVR.skn
  • skins/RoueGrey-SLIM.skn
  • skins/RoueOlive-SLIM.skn
  • skins/RoueSteel-SLIM.skn
  • skins/Royale Glass-GRAPHITE.skn
  • skins/Royale Glass-INDIGO.skn
  • skins/Royale1-BLUE.skn
  • skins/Royale1-HOMESTEAD.skn
  • skins/Royale1-METALLIC.skn
  • skins/Samui-SAMUI.skn
  • skins/Samui-SAMUI22.skn
  • skins/Sustenance-BLUE.skn
  • skins/Sustenance-ERGO.skn
  • skins/Sustenance-METALLIC.skn
  • skins/Sustenance-OLIVE.skn
  • skins/Sustenance-SLATE.skn
  • skins/System4-BLACK2.skn
  • skins/System4-BLUE.skn
  • skins/TD 4-PANTHER.skn
  • skins/TangoXP-BLUE.skn
  • skins/TangoXP-OLIVE.skn
  • skins/Tiger-WINDOWB.skn
  • skins/Tiger-WINDOWG.skn
  • skins/Tiger2-TGR.skn
  • skins/Tiger2-TGRPS.skn
  • skins/VistaXP-VISTAXPB2.skn
  • skins/VistaXP-VISTAXPS2.skn
  • skins/Watercolor-BLUE.skn
  • skins/Xplorer.skn
  • skins/corona-CORONA.skn
  • skins/corona-CORONA12.skn
  • skins/iTunes.skn
  • skins/luna-BLUE.skn
  • skins/luna-HOMESTEAD.skn
  • skins/luna-METALLIC.skn
  • skins/macos.skn
  • skins/mxp05.skn
  • skins/mxp1.skn
  • skins/mxp2.skn
  • skins/mxp3.skn
  • skins/mxskin03.skn
  • skins/mxskin10.skn
  • skins/mxskin11.skn
  • skins/mxskin13.skn
  • skins/mxskin14.skn
  • skins/mxskin15.skn
  • skins/mxskin16.skn
  • skins/mxskin17.skn
  • skins/mxskin18.skn
  • skins/mxskin19.skn
  • skins/mxskin2.skn
  • skins/mxskin20.skn
  • skins/mxskin21.skn
  • skins/mxskin22.skn
  • skins/mxskin23.skn
  • skins/mxskin24.skn
  • skins/mxskin25.skn
  • skins/mxskin26.skn
  • skins/mxskin27.skn
  • skins/mxskin28.skn
  • skins/mxskin29.skn
  • skins/mxskin30.skn
  • skins/mxskin31.skn
  • skins/mxskin32.skn
  • skins/mxskin33.skn
  • skins/mxskin35.skn
  • skins/mxskin36.skn
  • skins/mxskin37.skn
  • skins/mxskin38.skn
  • skins/mxskin39.skn
  • skins/mxskin41.skn
  • skins/mxskin42.skn
  • skins/mxskin43.skn
  • skins/mxskin44.skn
  • skins/mxskin45.skn
  • skins/mxskin46.skn
  • skins/mxskin47.skn
  • skins/mxskin48.skn
  • skins/mxskin49.skn
  • skins/mxskin50.skn
  • skins/mxskin51.skn
  • skins/mxskin53.skn
  • skins/mxskin54.skn
  • skins/mxskin55.skn
  • skins/mxskin56.skn
  • skins/mxskin57.skn
  • skins/mxskin58.skn
  • skins/mxskin59.skn
  • skins/mxskin61.skn
  • skins/mxskin63.skn
  • skins/mxskin64.skn
  • skins/mxskin65.skn
  • skins/mxskin66.skn
  • skins/mxskin68.skn
  • skins/mxskin71.skn
  • skins/mxskin8.skn
  • skins/mxskin9.skn
  • skins/office2003.skn
  • skins/solaris99.skn
  • skins/wmpx-XMP2.skn
  • skins/wmpx-XMPX3.skn
  • sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    1b1a70babde0a2663fcc833b56850660


    Headers

    Imports

    Exports

    Sections

  • DC RAT/How to use the Public folder.txt
  • DC RAT/cracker v2 new pw list.zip
    .zip
  • WindowsApplication14.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • WindowsControlLibrary1.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • api.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections