Extracted

• • Target

    JaffaCakes118_b83040da3f1807b70073995b76f404fb

  • Size

    1.1MB

  • MD5

    b83040da3f1807b70073995b76f404fb

  • SHA1

    9b1710d570ad771bd0a193f046133757765ab2f6

  • SHA256

    10291c9688d1b2c6b06cd10c5ef4e7a8e8d19e5b445d0f7cacae8a920b5a1bfe

  • SHA512

    7f6f9762556e752c96e0a0b27644f03e57c5a535da1cd78a4db9d794d0be5ae711f3f61138f46f42a20a39faa7977e77f45351a672db11946cbffe3638db71b5

  • SSDEEP

    12288:AVPFrG3e4v9x8ar3sIBR9ewSOHFMpdYNOQX7Tuz1UJSac:4keE9War3sIBR9eEl40OAl1c

  Score

  10^/10

  darkcometaltri xdiscoveryrattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops autorun.inf file

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2