Extracted

Extracted

• • Target

    JaffaCakes118_042b519fea63b319f550f3fe347c4fcc

  • Size

    695KB

  • MD5

    042b519fea63b319f550f3fe347c4fcc

  • SHA1

    c043df2da14e88dc1576fbab9bc93df91a573d0c

  • SHA256

    10c611a91e873a2ca75ed2bb5b9ea171230b3568b85c494309e7b1af9b104cd5

  • SHA512

    9ae39be49fd5b56b097aae991b56deee765a1439919e8d78d4f72c5e80c13be12807e530395d5718cd30a74f046dd074b06cc86ab4a896db45c095b948d5e2ab

  • SSDEEP

    12288:NJ6i828AWSUJ0bJldsnDZE+fbcWyAUVZ9B5W2JXyWVTm3B32iPUd1CT3G5kneR4:76iH8AXUJ0tjUDXcrAsDW2tyWVTm3BGC

  Score

  10^/10

  darkcometguest16discoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2