Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...0e.exe

windows7-x64

10

JaffaCakes...0e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_111d34ac01b045687d936709bce1250e

  • Size

    865KB

  • MD5

    111d34ac01b045687d936709bce1250e

  • SHA1

    2fa90f830115668ff5262ad8ab3748c419c8c31d

  • SHA256

    ecced6fad4fab8949886e0e5322582b4d8f2c507cf608e5225c13433f3aaf3fd

  • SHA512

    3693815921f78767bffafd8161351916c091ebafb411e418f17425b79152ef1bfe10ef8db133477344a47246a5579091f1e980c00f551be8c17fe7cb2c236a1f

  • SSDEEP

    12288:4X2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zb7G/QOOoe:uss2Sm39NNv9wY7tHwbzfIoK6Mo0l

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

192.168.2.102:1604

79.220.233.250:1604
Mutex

DC_MUTEX-7AF2NNS

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    boVoHKgbH3xj

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_111d34ac01b045687d936709bce1250e
    .exe windows:4 windows x86 arch:x86

    6f0fecaae0f40ed3ea31df971b69bcca


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.