Extracted

• • Target

    JaffaCakes118_21c96523ffef7141596f778038e81489

  • Size

    1.2MB

  • MD5

    21c96523ffef7141596f778038e81489

  • SHA1

    644ee3e54862ddcc2fcca0a80b3ebbe5fa5d3cdc

  • SHA256

    761be35bfcb634db78cfafd575cdacad5f1d1548f8a2aed0b06fcc4f5a8b192e

  • SHA512

    31aea96ac659c2786011bdbc73d94e13ed803ac7d2820a71419462e565de7b121562c7b126b91107d3114fb554e0306ae8fc1c936f1baed770ef71fa6e0b3921

  • SSDEEP

    24576:Q5Jiux82WOLDMMUTo6S5jSRBJclqLQO6tXaIHPbGRYyVvGnr5pzvtQzc:48ux8ALD7UJC/lyQOMXaITGRYysnVpZ9

  Score

  10^/10

  darkcometguest16defense_evasiondiscoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    defense_evasion

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2