Behavioral task
behavioral1
Sample
BoM 7.3/BoM.exe
Resource
win7-20240704-en
General
-
Target
74255c427faad11ea6206bea7d9687fc_JaffaCakes118
-
Size
521KB
-
MD5
74255c427faad11ea6206bea7d9687fc
-
SHA1
2507b61612aec437370ea41cfa645b021885a126
-
SHA256
befe92df2a5ac8d0918a4bcbfcdbf0ae141c8421cc214cf1e47310097cb1d21b
-
SHA512
1267b949684e945a82f3b7699846b63e26f5f1d47038acec53f964f5090f77b7a4e827bcb3094d0f5a66998f27cdc882ac743fd00f5a0591022e6759f40a1d02
-
SSDEEP
12288:SyabH3b1tKqr3uvzxDbB19e/p1I51p47VnLwsahHm:bAb1N+9D919q1y27Vn+4
Malware Config
Signatures
-
resource yara_rule static1/unpack001/BoM 7.3/BoM.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BoM 7.3/BoM.exe
Files
-
74255c427faad11ea6206bea7d9687fc_JaffaCakes118.zip
-
BoM 7.3/BoM.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 611KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
BoM 7.3/History.nfo
-
BoM 7.3/Readme.txt