Behavioral task
behavioral1
Sample
c9749824914dd2b310860d78eb1dc98d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c9749824914dd2b310860d78eb1dc98d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c9749824914dd2b310860d78eb1dc98d_JaffaCakes118
-
Size
40KB
-
MD5
c9749824914dd2b310860d78eb1dc98d
-
SHA1
3027a81afa5a99ccd293f5d3474398a0dcd96c47
-
SHA256
6217c28219e6eacb684c84037109b8b8429a49e58a66e84ab4de89f3076faeef
-
SHA512
84cf290b3371c2da1152a4af2abbc056aa676ff634d304813d3f71d9949bca813817be2171f7c39f7fe4d7d129842285f9a65731d21cf829de6046fd89af598d
-
SSDEEP
768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHl:aqk/Zdic/qjh8w19JDHl
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9749824914dd2b310860d78eb1dc98d_JaffaCakes118
Files
-
c9749824914dd2b310860d78eb1dc98d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ