Behavioral task
behavioral1
Sample
dcf177b4659877e4bfba86c5e98ff09e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dcf177b4659877e4bfba86c5e98ff09e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcf177b4659877e4bfba86c5e98ff09e_JaffaCakes118
-
Size
48KB
-
MD5
dcf177b4659877e4bfba86c5e98ff09e
-
SHA1
0e77886c6bb2b5930b270e8f1f6d2fef48291845
-
SHA256
0d48492caf6ade2af6e649ccb90e2b3d69c16a1f398ec6b9f0f2a46af9d14754
-
SHA512
978c8b5946585109e9acb725834be16c0970b37aeb386e00e5727ec2d070d6b3692ff2d72c5a445806d648ac52e72d05e5ef91a4f23ef4079c9ab9aa9ef33eda
-
SSDEEP
1536:/g7wc1aGNC0klI7CPN3WnjCFzXQwWkNeb:I7wc1aOCo7C13EjCdOkNe
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcf177b4659877e4bfba86c5e98ff09e_JaffaCakes118
Files
-
dcf177b4659877e4bfba86c5e98ff09e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ