Extracted

• • Target

    JaffaCakes118_77543d0eaa86dc3ea9c7de273abf61b2

  • Size

    2.2MB

  • MD5

    77543d0eaa86dc3ea9c7de273abf61b2

  • SHA1

    3f0d55d6b9b7379459dfc7be7a8134cfad3c6214

  • SHA256

    e7f905fcba3d2ef6dde568e3c7b6b2be8d9a8f3a735266f282e3615bf6c255aa

  • SHA512

    82424af7a04f4894846f702127e222f013df4d499643894719c4b656fec38a7b21bdecbb8a22cebc25e50741cb00ff1da7227787a79285f927353cd51519fc89

  • SSDEEP

    49152:j/WhjQ0LXINTAqB9pTXFicZLSTukr7vMnAxctou0t41xfsVO6:jey0pqB9pTEcZOqkrgnOctou7xk

  Score

  10^/10

  darkcomettestdefense_evasiondiscoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Windows security bypass

    defense_evasiontrojan

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Windows security modification

    defense_evasiontrojan

  • Suspicious use of SetThreadContext

  behavioral1behavioral2