Behavioral task
behavioral1
Sample
fe51e540c99e0c91b229e8c651de7d38_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fe51e540c99e0c91b229e8c651de7d38_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe51e540c99e0c91b229e8c651de7d38_JaffaCakes118
-
Size
61KB
-
MD5
fe51e540c99e0c91b229e8c651de7d38
-
SHA1
07e2157cc29097637eddd4fd00c277b1e6d24ad7
-
SHA256
f4a64998000dbcafbfe56a16a4ec2595886e87cdab814c3b5ad0dfd3e5aac3f9
-
SHA512
b9e650a65b6e0789d1a85db3b9bc1267bf5bb872e28410b9855467696c564d8481f691c2c38a948910e9030cdf85676718faa9b4c5aee3b49f900c976e6ad91c
-
SSDEEP
1536:/g7wc1aGNC0klI7CPN3sG0q50ZgtnzzqpmpnUNcIB:I7wc1aOCo7C13shZ6n/GcIB
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe51e540c99e0c91b229e8c651de7d38_JaffaCakes118
Files
-
fe51e540c99e0c91b229e8c651de7d38_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ