General

  • Target

    JaffaCakes118_27f6e79bf04f1af7f41f50760c597893

  • Size

    1.0MB

  • MD5

    27f6e79bf04f1af7f41f50760c597893

  • SHA1

    d52d80ccb437c2cc652b98c504f7a0ee1b0136d4

  • SHA256

    ce10c10d0a415c12551d2b8273a351d33afac796203bb50cf4d4d2c8d57b8a04

  • SHA512

    c062fff700338354c31395cd1f7a63615ffb34ac743286fcd1e3664551032db331d97065dfbf4ef5289c1a8ab2d9733695b8f0c91aee4a366a996c22030636ad

  • SSDEEP

    12288:17Ibrt7GShRkOjsjIJ4JMLfodW/hazQ9UcA1kWUktNbgZyyaw6x94n1icb5zMQIp:17MPEQtnFVzIw3lKk1SKTWReDPs

Score
10/10

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_27f6e79bf04f1af7f41f50760c597893
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections