Behavioral task
behavioral1
Sample
c1b450d88bacd698d1f8dddb3fd17d3c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1b450d88bacd698d1f8dddb3fd17d3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1b450d88bacd698d1f8dddb3fd17d3c_JaffaCakes118
-
Size
40KB
-
MD5
c1b450d88bacd698d1f8dddb3fd17d3c
-
SHA1
ccde9a05fbab82279985170c4c43cc264d2c44e2
-
SHA256
e789d13b48571b0cd5c1f97cb5f355646b715dd0ed174a0df11c4d80838c8611
-
SHA512
f2cc68ca92c2bc7ed3426470ed4822660348e5c6e2d1302e0123a0206354624dd2e4f35179ecb0db46c57f9d42e9e613cb6b74da48406009b69523107ef0a9fd
-
SSDEEP
768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHKP:aqk/Zdic/qjh8w19JDHKP
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1b450d88bacd698d1f8dddb3fd17d3c_JaffaCakes118
Files
-
c1b450d88bacd698d1f8dddb3fd17d3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ