Behavioral task
behavioral1
Sample
JaffaCakes118_af3038a24b3d136726d25885d833cbcd.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_af3038a24b3d136726d25885d833cbcd.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_af3038a24b3d136726d25885d833cbcd
-
Size
59KB
-
MD5
af3038a24b3d136726d25885d833cbcd
-
SHA1
a6bd87f1f1b4e27c91359073e0d6f5f48bf23a75
-
SHA256
0f8bf60687b94ee21a9ef4a3bee5ae99866b9b88bc92da42f3d5e35f7f5dd85b
-
SHA512
fa14e344edb9973a9164262a6809559bf7820f55f31b894b0e382789618fbd0333bc03986808be0c241e47e75535db50c786e75b6ffd91e442ddce95809b3d74
-
SSDEEP
1536:/g7wc1aGNC0klI7CPN3ku7jSY2ySMzh6RylA:I7wc1aOCo7C1316jySU6YK
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_af3038a24b3d136726d25885d833cbcd
Files
-
JaffaCakes118_af3038a24b3d136726d25885d833cbcd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ