Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...b7.exe

windows7-x64

10

JaffaCakes...b7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_84d68ba099bf7d81396670964a1bd7b7

  • Size

    733KB

  • MD5

    84d68ba099bf7d81396670964a1bd7b7

  • SHA1

    29bb85f5027b374c37dc479b7e4517de7ffd8bb7

  • SHA256

    8f671bd0b76e4386233b6ce6f6835b3d91c37b78cba0e82c8926fb64b8bdd02e

  • SHA512

    72b84177442cd34d0ed037401526996399344b1c60e23e94e9194026c6a827bbba008cb4fd8c7ecc66986f8693786c449df4ac939cb5becbfc3797aa2e6b479b

  • SSDEEP

    12288:rpwABK90BOe/x9lPAYvxPQVjdsAY2XjWlnlpTMMXG91uhKIXn/:dwAcu99lPzvxP+Bsz2XjWTRMQckkIXn

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-2AD3ANP

Attributes
  • gencode

    dSZ%/RV-Q62j

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_84d68ba099bf7d81396670964a1bd7b7
    .exe windows:4 windows x86 arch:x86

    eedd309da92ed90ed28a0a0cfdbbb16c


    Headers

    Imports

    Sections