Overview

overview

10

Static

static

10

d3be5e38aa...18.exe

windows7-x64

10

d3be5e38aa...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3be5e38aac270f04a64772964cecec2_JaffaCakes118

  • Size

    331KB

  • MD5

    d3be5e38aac270f04a64772964cecec2

  • SHA1

    e5f09e39dff74eb12e1cedc97710b61b7e13104f

  • SHA256

    3f9b368ba8ec817ef1d59ba679a0f19cfef8e41172b721cc9d006e1cf4883a76

  • SHA512

    fe64a71c2c3e04503669cf500286543312b1c88fa9be5189c17a6b4d4d9077ffe366435cab3740a136fc56bd19e66ca2062cd631131ae890c9dbb55818da1649

  • SSDEEP

    6144:Ek4CFfifD2gVKVTQQ249HZ52KTh9XKOCgLJacj5/AZtRs2yI25LplSZkOiu9PZ/p:EkXgr8VMQDT52WXKq9fj5/AZjTA5kNVR

Score
10/10
upxdarkcomet

Malware Config

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d3be5e38aac270f04a64772964cecec2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections