Overview

overview

10

Static

static

10

JaffaCakes...90.exe

windows7-x64

10

JaffaCakes...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_69948e09d591e268dcda4ab2e69c5e90

  • Size

    658KB

  • MD5

    69948e09d591e268dcda4ab2e69c5e90

  • SHA1

    ee99170e15efa2827b0a6bc4af02161838e3c674

  • SHA256

    ce9311bb05f9dcff7cd1395670c59c3ae216c4005a8ddef15531c0628cd0df23

  • SHA512

    3057d21e5a8d702e790f295f3d97413bdba54b674739ae2a10ed4fb639dcd539a7fcba01e789a4e4b2fee56d5a6950f9d0d3b48fc1255cb37a75351c70874fcb

  • SSDEEP

    12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hE:GZ1xuVVjfFoynPaVBUR8f+kN10EBy

Score
10/10
slavezdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Slavez

C2

jedi430.no-ip.biz:2000

Mutex

DC_MUTEX-5R03H9H

Attributes
  • gencode

    cBgndpnxl1ng

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_69948e09d591e268dcda4ab2e69c5e90
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections