Behavioral task
behavioral1
Sample
535986105e52ba8626f64df4a867a4f3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
535986105e52ba8626f64df4a867a4f3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
535986105e52ba8626f64df4a867a4f3_JaffaCakes118
-
Size
47KB
-
MD5
535986105e52ba8626f64df4a867a4f3
-
SHA1
4637290e6f2211d87c33d56aafdeb4886b457e7d
-
SHA256
7ca524bd202b586c6147a9d5bfb8b18d89fff6537123ff47114ce0c3ab998036
-
SHA512
52cb2275cb13a920fbbf6ead9a2a4145d5313a2fea892c4da47bcdb44da6ff5942017c04688dcc82183c02861fbdbeb5d7d64f7e83c0b9f2aa85badc76ea142d
-
SSDEEP
768:SCIqdH/k1ZVcT194jp4VwiChszE+FuA7wiChszE+FuAB:SNqaLV8a6Vwij4+FuA7wij4+FuAB
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule static1/unpack001/out.upx family_mydoom -
Mydoom family
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 535986105e52ba8626f64df4a867a4f3_JaffaCakes118 unpack001/out.upx
Files
-
535986105e52ba8626f64df4a867a4f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ