Behavioral task
behavioral1
Sample
f5d85e8871a685785bb6cdbd89b0a8b2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f5d85e8871a685785bb6cdbd89b0a8b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5d85e8871a685785bb6cdbd89b0a8b2_JaffaCakes118
-
Size
44KB
-
MD5
f5d85e8871a685785bb6cdbd89b0a8b2
-
SHA1
0313d3e0f14d154457bfb58f026a123c41acd335
-
SHA256
5c05a2e5a24a1eacf46e35d573dacad349442a0d9da4edf2b1bce02e0e28dcaa
-
SHA512
74ca2403c446f6ccfd3d713c84bdea4dfa3d39b194163dd412bc45102b0b2f29d8f46bec1f2e742c308685a15f4979ed6f07c694b268de2571023dcc63bbe314
-
SSDEEP
768:/EU07c92/EyTAYtxqfGNC0klI7C8yOvi3eisuAzVEg9gI3sAs:/g7wc1aGNC0klI7CPN3QuArH8As
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d85e8871a685785bb6cdbd89b0a8b2_JaffaCakes118
Files
-
f5d85e8871a685785bb6cdbd89b0a8b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ