Behavioral task
behavioral1
Sample
BoM 7.0/BoM.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
BoM 7.0/BoM.exe
Resource
win10v2004-20240709-en
General
-
Target
3cb8f32fe1d1d61f891de3eb2613f9cb_JaffaCakes118
-
Size
515KB
-
MD5
3cb8f32fe1d1d61f891de3eb2613f9cb
-
SHA1
c6366ddfce335c36501153f1cbcaa03f954042cc
-
SHA256
1dc62355eea0fb09b783b5c721d9f14fd7ed8edd91b3fa4a23251457cd9a0ae5
-
SHA512
c81ada0cb66b1b8d56c5e8c303112a44cb2a8781a0eb834a99f84304eda378df128c5ebaee1a8249761ad88d90b3c53b760efd88a1c6c2c9e6bd935524b3949b
-
SSDEEP
12288:U7d952tBHTrDgdNxMPFpJ542kKY2UhpgV2t6HcbADS5TG/Mp6aEJN:U7d72/rUdgpJ5l9Uhpg4t2EG/Mp6aeN
Malware Config
Signatures
-
resource yara_rule static1/unpack001/BoM 7.0/BoM.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BoM 7.0/BoM.exe
Files
-
3cb8f32fe1d1d61f891de3eb2613f9cb_JaffaCakes118.zip
-
BoM 7.0/BoM.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 604KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
BoM 7.0/History.nfo
-
BoM 7.0/Readme.txt