C:\Users\metho\Desktop\release (1)\Vmax Perm\comet.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
comet.exe
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
key.txt
Resource
win11-20240802-en
General
-
Target
UEFI, EFI, SHIT WOOFER ( AUTH SWAPPED ).rar
-
Size
1.1MB
-
MD5
f9c12d456bd179909393c383c018156b
-
SHA1
c37f77ad8cab858a7bb848f5390987682f2149bb
-
SHA256
edf295456f56ec74434298195829eb2e4afdb252f6f2683227eeefc84eef21fd
-
SHA512
4af0e4a75b4c4433cb4e09a7edfe4e1ad34c89c30eb049f72db4e676f44fda496c10221e41667ab2d961132d2385d77026d5810fcd39530cc94a23674fe65621
-
SSDEEP
24576:vEZWIO8TlyDp44HIOM+2JWKtsXnMqetoNLlbBLZa9Tj:guUkxHxtKtsXMqetoNLt+9X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/comet.exe
Files
-
UEFI, EFI, SHIT WOOFER ( AUTH SWAPPED ).rar.rar
-
comet.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
key.txt