Extracted

• • Target

    bf4facc092a43d6bf65238bc42829aa0_JaffaCakes118

  • Size

    541KB

  • MD5

    bf4facc092a43d6bf65238bc42829aa0

  • SHA1

    8ab0d2da0b5b7be10f1227bdfc379d06697fb4a8

  • SHA256

    ca32b9617d34f22915e06df577f2ec4c2b66c4755de728f66c22af54d66c9dd1

  • SHA512

    2551d720d79f68802cd76bf0d4bdc6774b268012ebbe557d36dc090068b1b6d429c765e705464424925706153e3d5fcc34893bd4bef84053e4c9d4825700f9f2

  • SSDEEP

    12288:B6Ri3t6jpnfWj6GGaHa3/S9Ln2Pw0to0khHPbq4vkaKy6AKlheZC:B6gglWjo3YL2ImtGgTAKCZC

  Score

  10^/10

  darkcometguest16discoveryrattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2