Behavioral task
behavioral1
Sample
JaffaCakes118_cfa6f69280416c210b8c68b13bd3a474.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_cfa6f69280416c210b8c68b13bd3a474.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_cfa6f69280416c210b8c68b13bd3a474
-
Size
76KB
-
MD5
cfa6f69280416c210b8c68b13bd3a474
-
SHA1
a805b89e692af4b235fece89fe2992154bc99f44
-
SHA256
211f5ed4a2f59288df802e89c8a971ad6737e957a6c64822a4ad16f36045b830
-
SHA512
1184404d7b2010de26094d5188c1a190590c8947463d0461ae97b92adb1c385e52b2967ccff087751accd3eeedadd5594638b2b5c6a465046be1ce5238c58636
-
SSDEEP
1536:b7wc1aGNC0klI7CPpIFa6rruggrPoUYcNtXPlEK5/HEa03b0GH8:b7wc1aOCo7CxI/ruggrPgqtXn9E0O8
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule sample family_mydoom -
Mydoom family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_cfa6f69280416c210b8c68b13bd3a474
Files
-
JaffaCakes118_cfa6f69280416c210b8c68b13bd3a474.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE