Overview

overview

10

Static

static

10

JaffaCakes...45.exe

windows7-x64

10

JaffaCakes...45.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_77c2a1bcb08f77dd1716b3ea5ec67445

  • Size

    635KB

  • MD5

    77c2a1bcb08f77dd1716b3ea5ec67445

  • SHA1

    274e9ef34bf7155d764f05f1135fd6dd5a4ce371

  • SHA256

    88578732fb5742287bee43d6fd2db98053e292811173a3bb5947d3c00b0cdd22

  • SHA512

    7a8de18a50c3da856e83fb7bb4d3159a4ebe823ceba5be1e40b1e1303e005989847574dc79b6a9c7951e34c2878a1784aa827ff3f9026cd70b10e4f244638a28

  • SSDEEP

    12288:gpwABK90BOeFx9lPAYvxPQVjdsAY2XjWlnlpTMMXG91uhKIXn/L:awAcuz9lPzvxP+Bsz2XjWTRMQckkIXnz

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-F54S21D

Attributes
  • gencode

    FA�o1KhH/jbF

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_77c2a1bcb08f77dd1716b3ea5ec67445
    .exe windows:4 windows x86 arch:x86

    eedd309da92ed90ed28a0a0cfdbbb16c


    Headers

    Imports

    Sections