General

  • Target

    JaffaCakes118_341d254329cf99d1251c66f2bae87c71

  • Size

    1.7MB

  • MD5

    341d254329cf99d1251c66f2bae87c71

  • SHA1

    c2505ebe01b9deae622f43677abf8982fb77a2cf

  • SHA256

    2896d43819e9b8b9f376018561a2105d1ecd3dfc26042370e89916ee217c3996

  • SHA512

    8eb1ce6e25ab04b04ff5a1513a05bded80acb2f2dd8796d222e4700bac9c75d55269b730a9266619cee4cf2697d1ca72e6dd9ab489dadcf11d35fc518e3f32dc

  • SSDEEP

    24576:sAQ6Zx9cxTmOrucTIEFSpOGp71ZuWASuMinP+rTc8+RCLhNvc5OCDQu:sAQ/TD5EOs7TdASKP+rTc82C1NkVcu

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

softwareone.no-ip.info:1604

Mutex

DC_MUTEX-F54S21D

Attributes
  • gencode

    %sm.e/V�z3cw

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_341d254329cf99d1251c66f2bae87c71
    .exe windows:4 windows x86 arch:x86

    953362745986d4bf8459e5dd8885442f


    Headers

    Imports

    Sections