Extracted

Extracted

• • Target

    JaffaCakes118_05bbb3e344ae73389d57581783d7a571

  • Size

    664KB

  • MD5

    05bbb3e344ae73389d57581783d7a571

  • SHA1

    991e2474958d8730015016e1bd74ef95d2e8ae6d

  • SHA256

    16ea99d96c7501c6d88ac088976a0b7b07859567859d21e36115af81c2646c4f

  • SHA512

    2d7415c7c8da7a197caab0f287bd39921ad28b7da3932059118c2ab3ddef0edbfd22f21958c04afbe2b8e81f84477a012d840da08f19b7d658ba224c6f9cbed5

  • SSDEEP

    12288:SPYNMzBKPMZf/WxzRZ0NlaPtEGB49xg8yhbSkCaduM7tB3B8P:qBYMUKe/B0dDkCawsBU

  Score

  10^/10

  darkcometguest16discoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2