General

  • Target

    ea82e94c3f19a8d8989df6b7aa2d4e33_JaffaCakes118

  • Size

    13.4MB

  • MD5

    ea82e94c3f19a8d8989df6b7aa2d4e33

  • SHA1

    85f693567b5bdd14c052dc455509cffec7064fb4

  • SHA256

    d673eceb92fb14476c8f2c3a736aa9f04492600ba4b35a12ac54670cfb90ff6d

  • SHA512

    721bfd799702f4bb31d69710811f6011129314c250628e913a792e10cb5c84bca5771ce05317defe3a9e1e01e8b45001903be041499e5a5e9740deeb65c0482e

  • SSDEEP

    393216:RTwCYs6QddK6Yx5vgdAzbCZIFBBPw5vUfqAX64he:RxRkmFEPw5vUdXM

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • ea82e94c3f19a8d8989df6b7aa2d4e33_JaffaCakes118
    .rar
  • DarkCometRAT531/Celesty Binder/Celesty.exe
    .exe windows:5 windows x86 arch:x86

    64c713842ab4b8dc212c3c8be646bf1d


    Headers

    Imports

    Sections

  • DarkCometRAT531/Celesty Binder/Lang/AR.ini
  • DarkCometRAT531/Celesty Binder/Lang/EN.ini
  • DarkCometRAT531/Celesty Binder/Lang/ES.ini
  • DarkCometRAT531/Celesty Binder/Lang/FR.ini
  • DarkCometRAT531/Celesty Binder/Lang/GR.ini
  • DarkCometRAT531/Celesty Binder/Lang/IT.ini
  • DarkCometRAT531/Celesty Binder/Lang/LV.ini
  • DarkCometRAT531/Celesty Binder/Lang/NO.ini
  • DarkCometRAT531/Celesty Binder/Lang/SE.ini
  • DarkCometRAT531/Celesty Binder/Lang/SR.ini
  • DarkCometRAT531/Celesty Binder/Lang/VN.ini
  • DarkCometRAT531/Celesty Binder/readme.txt
  • DarkCometRAT531/DarkComet.exe
    .exe windows:5 windows x86 arch:x86

    2494efc890c2356634d592bc26e3292b


    Headers

    Imports

    Sections

  • DarkCometRAT531/GeoIP.dat
  • DarkCometRAT531/Goodies/wallpaper_1.jpg
    .jpg
  • DarkCometRAT531/Goodies/wallpaper_2.jpg
    .jpg
  • DarkCometRAT531/INI/Main.ini
  • DarkCometRAT531/INI/Rask.ini
  • DarkCometRAT531/INI/Settings-01.ini
  • DarkCometRAT531/Icons/againzip.ico
  • DarkCometRAT531/Icons/archive.ico
  • DarkCometRAT531/Icons/bittorrent.ico
  • DarkCometRAT531/Icons/chrome.ico
  • DarkCometRAT531/Icons/cubic.ico
  • DarkCometRAT531/Icons/emulefold.ico
  • DarkCometRAT531/Icons/facebook.ico
  • DarkCometRAT531/Icons/facedebook.ico
  • DarkCometRAT531/Icons/female.ico
  • DarkCometRAT531/Icons/ffox.ico
  • DarkCometRAT531/Icons/ffoxwhite.ico
  • DarkCometRAT531/Icons/girl.ico
  • DarkCometRAT531/Icons/heart.ico
  • DarkCometRAT531/Icons/idontknowlol.ico
  • DarkCometRAT531/Icons/limewire.ico
  • DarkCometRAT531/Icons/limwizearrow.ico
  • DarkCometRAT531/Icons/limy.ico
  • DarkCometRAT531/Icons/mov.ico
  • DarkCometRAT531/Icons/rar.ico
  • DarkCometRAT531/Icons/shareaza.ico
  • DarkCometRAT531/Icons/steam.ico
  • DarkCometRAT531/Icons/steamfag.ico
  • DarkCometRAT531/Icons/utorrent.ico
  • DarkCometRAT531/Icons/utorrent2.ico
  • DarkCometRAT531/Icons/utorrentfold.ico
  • DarkCometRAT531/Icons/viagrafemale.ico
  • DarkCometRAT531/Icons/win.ico
  • DarkCometRAT531/Icons/winfolder.ico
  • DarkCometRAT531/Icons/winmov.ico
  • DarkCometRAT531/Icons/wintool.ico
  • DarkCometRAT531/Icons/zipzip.ico
  • DarkCometRAT531/Plugins SRC/Edit Server Plugin Example/dc_msgbox.dpr
  • DarkCometRAT531/Plugins SRC/Edit Server Plugin Example/dc_msgbox.res
  • DarkCometRAT531/Spoof extensions/Spoofer.exe
    .exe windows:5 windows x86 arch:x86

    3522348ff9d086b792d82d1adbec5cc5


    Headers

    Imports

    Sections

  • DarkCometRAT531/UPX.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • DarkCometRAT531/Users/ Acer[ACER-B1DA4AEDC8 ]/Downloads/me.JPG
    .jpg
  • DarkCometRAT531/changelog.txt
  • DarkCometRAT531/comet.db
  • DarkCometRAT531/config.ini
  • DarkCometRAT531/readme_help.txt
  • DarkCometRAT531/skins/ClearLooks-BLUE.skn
  • DarkCometRAT531/skins/ClearLooks-HUMAN.skn
  • DarkCometRAT531/skins/Crystal Clear-CRCL1S.skn
  • DarkCometRAT531/skins/DarkComet.skn
  • DarkCometRAT531/skins/Extensis-COPPER.skn
  • DarkCometRAT531/skins/Extensis-EXTENSIS.skn
  • DarkCometRAT531/skins/GNOME-Blue.skn
  • DarkCometRAT531/skins/GNOME-Gray.skn
  • DarkCometRAT531/skins/GNOME-Green.skn
  • DarkCometRAT531/skins/GUIRelax-CINDER.skn
  • DarkCometRAT531/skins/GUIRelax-SKYMAN.skn
  • DarkCometRAT531/skins/GUIRelax-SUBTLE.skn
  • DarkCometRAT531/skins/LE4-BLACKC.skn
  • DarkCometRAT531/skins/LE4-DEFAULT.skn
  • DarkCometRAT531/skins/Longhorn DWM-DWM.skn
  • DarkCometRAT531/skins/Longhorn Slate-Plex-SLATE.skn
  • DarkCometRAT531/skins/Longhorn Style-BLUE.skn
  • DarkCometRAT531/skins/Luna (Longhorn Revolution)-BLUE.skn
  • DarkCometRAT531/skins/Luna (Longhorn Revolution)-HOMESTEAD.skn
  • DarkCometRAT531/skins/Luna (Longhorn Revolution)-METALLIC.skn
  • DarkCometRAT531/skins/Luna (Longhorn Revolution)-NEON.skn
  • DarkCometRAT531/skins/MSN.skn
  • DarkCometRAT531/skins/MediaC-MEDIA1024.skn
  • DarkCometRAT531/skins/Mollis-BLUE.skn
  • DarkCometRAT531/skins/ONatural-BLUE.skn
  • DarkCometRAT531/skins/Office 2007.skn
  • DarkCometRAT531/skins/OpusOS-BLUEB2.skn
  • DarkCometRAT531/skins/OpusOS-DEEP2.skn
  • DarkCometRAT531/skins/OpusOS-OLIVE.skn
  • DarkCometRAT531/skins/Plex Style-PLEX.skn
  • DarkCometRAT531/skins/Plex Style-PLEXM6SVR.skn
  • DarkCometRAT531/skins/RoueGrey-SLIM.skn
  • DarkCometRAT531/skins/RoueOlive-SLIM.skn
  • DarkCometRAT531/skins/RoueSteel-SLIM.skn
  • DarkCometRAT531/skins/Royale Glass-GRAPHITE.skn
  • DarkCometRAT531/skins/Royale Glass-INDIGO.skn
  • DarkCometRAT531/skins/Royale1-BLUE.skn
  • DarkCometRAT531/skins/Royale1-HOMESTEAD.skn
  • DarkCometRAT531/skins/Royale1-METALLIC.skn
  • DarkCometRAT531/skins/Samui-SAMUI.skn
  • DarkCometRAT531/skins/Samui-SAMUI22.skn
  • DarkCometRAT531/skins/Sustenance-BLUE.skn
  • DarkCometRAT531/skins/Sustenance-ERGO.skn
  • DarkCometRAT531/skins/Sustenance-METALLIC.skn
  • DarkCometRAT531/skins/Sustenance-OLIVE.skn
  • DarkCometRAT531/skins/Sustenance-SLATE.skn
  • DarkCometRAT531/skins/System4-BLACK2.skn
  • DarkCometRAT531/skins/System4-BLUE.skn
  • DarkCometRAT531/skins/TD 4-PANTHER.skn
  • DarkCometRAT531/skins/TangoXP-BLUE.skn
  • DarkCometRAT531/skins/TangoXP-OLIVE.skn
  • DarkCometRAT531/skins/Tiger-WINDOWB.skn
  • DarkCometRAT531/skins/Tiger-WINDOWG.skn
  • DarkCometRAT531/skins/Tiger2-TGR.skn
  • DarkCometRAT531/skins/Tiger2-TGRPS.skn
  • DarkCometRAT531/skins/VistaXP-VISTAXPB2.skn
  • DarkCometRAT531/skins/VistaXP-VISTAXPS2.skn
  • DarkCometRAT531/skins/Watercolor-BLUE.skn
  • DarkCometRAT531/skins/Xplorer.skn
  • DarkCometRAT531/skins/corona-CORONA.skn
  • DarkCometRAT531/skins/corona-CORONA12.skn
  • DarkCometRAT531/skins/iTunes.skn
  • DarkCometRAT531/skins/luna-BLUE.skn
  • DarkCometRAT531/skins/luna-HOMESTEAD.skn
  • DarkCometRAT531/skins/luna-METALLIC.skn
  • DarkCometRAT531/skins/macos.skn
  • DarkCometRAT531/skins/mxp05.skn
  • DarkCometRAT531/skins/mxp1.skn
  • DarkCometRAT531/skins/mxp2.skn
  • DarkCometRAT531/skins/mxp3.skn
  • DarkCometRAT531/skins/mxskin03.skn
  • DarkCometRAT531/skins/mxskin10.skn
  • DarkCometRAT531/skins/mxskin11.skn
  • DarkCometRAT531/skins/mxskin13.skn
  • DarkCometRAT531/skins/mxskin14.skn
  • DarkCometRAT531/skins/mxskin15.skn
  • DarkCometRAT531/skins/mxskin16.skn
  • DarkCometRAT531/skins/mxskin17.skn
  • DarkCometRAT531/skins/mxskin18.skn
  • DarkCometRAT531/skins/mxskin19.skn
  • DarkCometRAT531/skins/mxskin2.skn
  • DarkCometRAT531/skins/mxskin20.skn
  • DarkCometRAT531/skins/mxskin21.skn
  • DarkCometRAT531/skins/mxskin22.skn
  • DarkCometRAT531/skins/mxskin23.skn
  • DarkCometRAT531/skins/mxskin24.skn
  • DarkCometRAT531/skins/mxskin25.skn
  • DarkCometRAT531/skins/mxskin26.skn
  • DarkCometRAT531/skins/mxskin27.skn
  • DarkCometRAT531/skins/mxskin28.skn
  • DarkCometRAT531/skins/mxskin29.skn
  • DarkCometRAT531/skins/mxskin30.skn
  • DarkCometRAT531/skins/mxskin31.skn
  • DarkCometRAT531/skins/mxskin32.skn
  • DarkCometRAT531/skins/mxskin33.skn
  • DarkCometRAT531/skins/mxskin35.skn
  • DarkCometRAT531/skins/mxskin36.skn
  • DarkCometRAT531/skins/mxskin37.skn
  • DarkCometRAT531/skins/mxskin38.skn
  • DarkCometRAT531/skins/mxskin39.skn
  • DarkCometRAT531/skins/mxskin41.skn
  • DarkCometRAT531/skins/mxskin42.skn
  • DarkCometRAT531/skins/mxskin43.skn
  • DarkCometRAT531/skins/mxskin44.skn
  • DarkCometRAT531/skins/mxskin45.skn
  • DarkCometRAT531/skins/mxskin46.skn
  • DarkCometRAT531/skins/mxskin47.skn
  • DarkCometRAT531/skins/mxskin48.skn
  • DarkCometRAT531/skins/mxskin49.skn
  • DarkCometRAT531/skins/mxskin50.skn
  • DarkCometRAT531/skins/mxskin51.skn
  • DarkCometRAT531/skins/mxskin53.skn
  • DarkCometRAT531/skins/mxskin54.skn
  • DarkCometRAT531/skins/mxskin55.skn
  • DarkCometRAT531/skins/mxskin56.skn
  • DarkCometRAT531/skins/mxskin57.skn
  • DarkCometRAT531/skins/mxskin58.skn
  • DarkCometRAT531/skins/mxskin59.skn
  • DarkCometRAT531/skins/mxskin61.skn
  • DarkCometRAT531/skins/mxskin63.skn
  • DarkCometRAT531/skins/mxskin64.skn
  • DarkCometRAT531/skins/mxskin65.skn
  • DarkCometRAT531/skins/mxskin66.skn
  • DarkCometRAT531/skins/mxskin68.skn
  • DarkCometRAT531/skins/mxskin71.skn
  • DarkCometRAT531/skins/mxskin8.skn
  • DarkCometRAT531/skins/mxskin9.skn
  • DarkCometRAT531/skins/office2003.skn
  • DarkCometRAT531/skins/solaris99.skn
  • DarkCometRAT531/skins/wmpx-XMP2.skn
  • DarkCometRAT531/skins/wmpx-XMPX3.skn
  • DarkCometRAT531/sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    1b1a70babde0a2663fcc833b56850660


    Headers

    Imports

    Exports

    Sections