Overview

overview

10

Static

static

10

JaffaCakes...50.exe

windows7-x64

10

JaffaCakes...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_466ac122b6a3ad34739b8b1585134e50

  • Size

    252KB

  • MD5

    466ac122b6a3ad34739b8b1585134e50

  • SHA1

    c6c1e3244e01d7efabcbb9657c1832eecec4b0be

  • SHA256

    000fc1b17d8d2f687388fbe44ae50c9da6bb632596032590e3b82dd3a0e8c480

  • SHA512

    f3c53837a7776259152c0357285689042e2caaf7acb25f7244b5a9e2066c0ca62a62e38d20d7866395b5c7214a2d1185e56e4d88a7b680863631d3be50d4181a

  • SSDEEP

    6144:kD7cY2fgssM7Wirg9KXylmRiL+QMeC/i6isqX7UovnONztByipwxZ:kl8E4w5huat7UovONzbXw

Score
10/10
upxsexydarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Sexy

C2

conorburke.no-ip.biz:1604

Mutex

DC_MUTEX-LTG9L53

Attributes
  • gencode

    je0CkraEHjg6

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_466ac122b6a3ad34739b8b1585134e50
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections