mydoom | JaffaCakes118_43c9837ec9061e54b866bdfcd4ac8bf0 | Triage

Sharing

General

Target

JaffaCakes118_43c9837ec9061e54b866bdfcd4ac8bf0
Size

34KB
MD5

43c9837ec9061e54b866bdfcd4ac8bf0
SHA1

4141498946f266d95dc38342019b4fc3e3871662
SHA256

e21388ca0b899d654319ff7a43efe0aee94f683d2bcba8f34c982f94149ca291
SHA512

34ccfac467b99f72afadcb9a5c6217926fa0e689515ddaeeb712f1008dc192ecbe824af1de7767516b4c6b8617e8837da17801d99d73800d9c59c88d129ae864
SSDEEP

768:SCIqdH/k1ZVcT194jp4l0/BGsGTV/sF3hDTqvfO/dN6:SNqaLV8a6l0/BGsGTV/sphDDa

Score

10^/10

upx mydoom

Malware Config

Signatures

Detects MyDoom family 1 IoCs

resource	yara_rule
static1/unpack001/out.upx	family_mydoom

Mydoom family
mydoom

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_43c9837ec9061e54b866bdfcd4ac8bf0
unpack001/out.upx

Files

JaffaCakes118_43c9837ec9061e54b866bdfcd4ac8bf0
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ