General

  • Target

    1803978dd6ef77c97bfe4ed12fb69537_JaffaCakes118

  • Size

    15.6MB

  • MD5

    1803978dd6ef77c97bfe4ed12fb69537

  • SHA1

    941c8c8af213933dd49e4551aea84742d8a5b422

  • SHA256

    d9d2433546f7791638adf9c17390aa8d1899dbfc0ca1fac9dd129dce04f6faec

  • SHA512

    cd3e74d9ab2f2cc0f13bbde539941f898e7cc404191cd3ab24d6a47b91f2b58387bd723de1f253ca831a3e07acab060ce824e460e386076f163b7b65c872e508

  • SSDEEP

    393216:fMNtT9qkAwEcHmqx/aWGav8YGNdNPCsMOsUEd3VRkSv6CycbR:sdAbcHmqaPav8jPVC1Osl3Ect

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • One or more email addresses in PDF identified

    Detects presence of email addresses in PDF files.

Files

  • 1803978dd6ef77c97bfe4ed12fb69537_JaffaCakes118
    .zip
  • Celesty Binder/Celesty.exe
    .exe windows:5 windows x86 arch:x86

    64c713842ab4b8dc212c3c8be646bf1d


    Headers

    Imports

    Sections

  • Celesty Binder/Lang/AR.ini
  • Celesty Binder/Lang/EN.ini
  • Celesty Binder/Lang/ES.ini
  • Celesty Binder/Lang/FR.ini
  • Celesty Binder/Lang/GR.ini
  • Celesty Binder/Lang/IT.ini
  • Celesty Binder/Lang/LV.ini
  • Celesty Binder/Lang/NO.ini
  • Celesty Binder/Lang/SE.ini
  • Celesty Binder/Lang/SR.ini
  • Celesty Binder/Lang/VN.ini
  • Celesty Binder/pics/screen1.png
    .png
  • Celesty Binder/pics/screen2.png
    .png
  • Celesty Binder/pics/screen3.png
    .png
  • Celesty Binder/pics/screen4.png
    .png
  • Celesty Binder/pics/screen5.png
    .png
  • Celesty Binder/readme.txt
  • DOCS/pushme.pdf
    .pdf
    • http://Pushme.to

    • http://en-USPushme.to

    • http://pushme.to/

    • http://pushme.to/en-US

    • http://pushme.to/nickname

    • mailto:[email protected]

  • DarkComet.exe
    .exe windows:5 windows x86 arch:x86

    5369565355bc37e9a458de44a7f11fcf


    Headers

    Imports

    Sections

  • GeoIP.dat
  • Icons/againzip.ico
  • Icons/archive.ico
  • Icons/bittorrent.ico
  • Icons/chrome.ico
  • Icons/cubic.ico
  • Icons/emulefold.ico
  • Icons/facebook.ico
  • Icons/facedebook.ico
  • Icons/female.ico
  • Icons/ffox.ico
  • Icons/ffoxwhite.ico
  • Icons/girl.ico
  • Icons/heart.ico
  • Icons/idontknowlol.ico
  • Icons/limewire.ico
  • Icons/limwizearrow.ico
  • Icons/limy.ico
  • Icons/mov.ico
  • Icons/rar.ico
  • Icons/shareaza.ico
  • Icons/steam.ico
  • Icons/steamfag.ico
  • Icons/utorrent.ico
  • Icons/utorrent2.ico
  • Icons/utorrentfold.ico
  • Icons/viagrafemale.ico
  • Icons/win.ico
  • Icons/winfolder.ico
  • Icons/winmov.ico
  • Icons/wintool.ico
  • Icons/zipzip.ico
  • Plugins SRC/Edit Server Plugin Example/dc_msgbox.dpr
  • Plugins SRC/Edit Server Plugin Example/dc_msgbox.res
  • Spoof extensions/Spoofer.exe
    .exe windows:5 windows x86 arch:x86

    3522348ff9d086b792d82d1adbec5cc5


    Headers

    Imports

    Sections

  • changelog.txt
  • readme.txt
  • skins/ClearLooks-BLUE.skn
  • skins/ClearLooks-HUMAN.skn
  • skins/Crystal Clear-CRCL1S.skn
  • skins/DarkComet.skn
  • skins/Extensis-COPPER.skn
  • skins/Extensis-EXTENSIS.skn
  • skins/GNOME-Blue.skn
  • skins/GNOME-Gray.skn
  • skins/GNOME-Green.skn
  • skins/GUIRelax-CINDER.skn
  • skins/GUIRelax-SKYMAN.skn
  • skins/GUIRelax-SUBTLE.skn
  • skins/LE4-BLACKC.skn
  • skins/LE4-DEFAULT.skn
  • skins/Longhorn DWM-DWM.skn
  • skins/Longhorn Slate-Plex-SLATE.skn
  • skins/Longhorn Style-BLUE.skn
  • skins/Luna (Longhorn Revolution)-BLUE.skn
  • skins/Luna (Longhorn Revolution)-HOMESTEAD.skn
  • skins/Luna (Longhorn Revolution)-METALLIC.skn
  • skins/Luna (Longhorn Revolution)-NEON.skn
  • skins/MSN.skn
  • skins/MediaC-MEDIA1024.skn
  • skins/Mollis-BLUE.skn
  • skins/ONatural-BLUE.skn
  • skins/Office 2007.skn
  • skins/OpusOS-BLUEB2.skn
  • skins/OpusOS-DEEP2.skn
  • skins/OpusOS-OLIVE.skn
  • skins/Plex Style-PLEX.skn
  • skins/Plex Style-PLEXM6SVR.skn
  • skins/RoueGrey-SLIM.skn
  • skins/RoueOlive-SLIM.skn
  • skins/RoueSteel-SLIM.skn
  • skins/Royale Glass-GRAPHITE.skn
  • skins/Royale Glass-INDIGO.skn
  • skins/Royale1-BLUE.skn
  • skins/Royale1-HOMESTEAD.skn
  • skins/Royale1-METALLIC.skn
  • skins/Samui-SAMUI.skn
  • skins/Samui-SAMUI22.skn
  • skins/Sustenance-BLUE.skn
  • skins/Sustenance-ERGO.skn
  • skins/Sustenance-METALLIC.skn
  • skins/Sustenance-OLIVE.skn
  • skins/Sustenance-SLATE.skn
  • skins/System4-BLACK2.skn
  • skins/System4-BLUE.skn
  • skins/TD 4-PANTHER.skn
  • skins/TangoXP-BLUE.skn
  • skins/TangoXP-OLIVE.skn
  • skins/Tiger-WINDOWB.skn
  • skins/Tiger-WINDOWG.skn
  • skins/Tiger2-TGR.skn
  • skins/Tiger2-TGRPS.skn
  • skins/VistaXP-VISTAXPB2.skn
  • skins/VistaXP-VISTAXPS2.skn
  • skins/Watercolor-BLUE.skn
  • skins/Xplorer.skn
  • skins/corona-CORONA.skn
  • skins/corona-CORONA12.skn
  • skins/iTunes.skn
  • skins/luna-BLUE.skn
  • skins/luna-HOMESTEAD.skn
  • skins/luna-METALLIC.skn
  • skins/macos.skn
  • skins/mxp05.skn
  • skins/mxp1.skn
  • skins/mxp2.skn
  • skins/mxp3.skn
  • skins/mxskin03.skn
  • skins/mxskin10.skn
  • skins/mxskin11.skn
  • skins/mxskin13.skn
  • skins/mxskin14.skn
  • skins/mxskin15.skn
  • skins/mxskin16.skn
  • skins/mxskin17.skn
  • skins/mxskin18.skn
  • skins/mxskin19.skn
  • skins/mxskin2.skn
  • skins/mxskin20.skn
  • skins/mxskin21.skn
  • skins/mxskin22.skn
  • skins/mxskin23.skn
  • skins/mxskin24.skn
  • skins/mxskin25.skn
  • skins/mxskin26.skn
  • skins/mxskin27.skn
  • skins/mxskin28.skn
  • skins/mxskin29.skn
  • skins/mxskin30.skn
  • skins/mxskin31.skn
  • skins/mxskin32.skn
  • skins/mxskin33.skn
  • skins/mxskin35.skn
  • skins/mxskin36.skn
  • skins/mxskin37.skn
  • skins/mxskin38.skn
  • skins/mxskin39.skn
  • skins/mxskin41.skn
  • skins/mxskin42.skn
  • skins/mxskin43.skn
  • skins/mxskin44.skn
  • skins/mxskin45.skn
  • skins/mxskin46.skn
  • skins/mxskin47.skn
  • skins/mxskin48.skn
  • skins/mxskin49.skn
  • skins/mxskin50.skn
  • skins/mxskin51.skn
  • skins/mxskin53.skn
  • skins/mxskin54.skn
  • skins/mxskin55.skn
  • skins/mxskin56.skn
  • skins/mxskin57.skn
  • skins/mxskin58.skn
  • skins/mxskin59.skn
  • skins/mxskin61.skn
  • skins/mxskin63.skn
  • skins/mxskin64.skn
  • skins/mxskin65.skn
  • skins/mxskin66.skn
  • skins/mxskin68.skn
  • skins/mxskin71.skn
  • skins/mxskin8.skn
  • skins/mxskin9.skn
  • skins/office2003.skn
  • skins/solaris99.skn
  • skins/wmpx-XMP2.skn
  • skins/wmpx-XMPX3.skn
  • sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    1b1a70babde0a2663fcc833b56850660


    Headers

    Imports

    Exports

    Sections