Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...17.exe

windows7-x64

10

JaffaCakes...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f0b8852c0b559264764e4b682e1c1117

  • Size

    448KB

  • MD5

    f0b8852c0b559264764e4b682e1c1117

  • SHA1

    13182e5f1c700f246d452d702a6b3d49417fbf53

  • SHA256

    16181fddc28a16679199e91d57fec4ee7ecf2a8ab478783667960c69c446d410

  • SHA512

    7afc8b2509e61a623b4369e4b4d7c683945b3537bf661ac1480297e5147d445d7daee7200b9b0dadaa5cb766335c680bb3f2989d1b8edf9e6a3a8742571d4ca6

  • SSDEEP

    12288:NP4KfCRm47i/2Yku5upF1R36NaQ4ppnJN9IJaeh:VGHYkuspPRUQmJaO

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-1DN0ZPY

Attributes
  • gencode

    pnkjqJ5i6PP5

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_f0b8852c0b559264764e4b682e1c1117
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections