Behavioral task
behavioral1
Sample
cc3b858ab1f092cf2550c3c3a4a2777d_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
cc3b858ab1f092cf2550c3c3a4a2777d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
cc3b858ab1f092cf2550c3c3a4a2777d_JaffaCakes118
-
Size
63KB
-
MD5
cc3b858ab1f092cf2550c3c3a4a2777d
-
SHA1
0184adc6e24e025e2f84e2b28e0b924dc3fe6825
-
SHA256
2e50b8c1cfa2024422fc686f184c28ccd2ae87fbf3db3f8403c4de91b99221d3
-
SHA512
9c0300f4224abf85243df726194b7821656acf653bbd932551332427a873dbd8832750001c1556aa2e7da356303a11f82a0571928165c6ea9339e987ec9f276d
-
SSDEEP
768:k/q9m/ZsybSg2ts4L3RLc/qjhsKmMJ0UtH/hY+JFfJcqfwBT/HIy:k/qk/Zdic/qjh8MJDH++vCRoy
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc3b858ab1f092cf2550c3c3a4a2777d_JaffaCakes118
Files
-
cc3b858ab1f092cf2550c3c3a4a2777d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE