Extracted

• • Target

    JaffaCakes118_846791aebff11969db26239294c34f88

  • Size

    4.1MB

  • MD5

    846791aebff11969db26239294c34f88

  • SHA1

    ba7e48fc79942462b68554ad59ffd447314e5e44

  • SHA256

    51467d3c9573f5fa9b59c96ec258ebb19dc8600b16d4e85c4eeed73a6d15dbf4

  • SHA512

    a900361c8b7bca0695e854e8931f537f864f00745b0038c24079e4f5e65b61ce44b54d6c76433c843deb9d804ecb02a89eb78da3ed0f3b9ef2a88e98bf24e2ee

  • SSDEEP

    49152:PizWiEURQ/0w+abeaaHQmbCfX2QAyO6ysdS+5GfuC7dvBfxARCP:K9EUR7Ke/Zym2O6yUS+5GN5rP

  Score

  10^/10

  darkcometguest16discoveryrattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2