Behavioral task
behavioral1
Sample
s0m_inst.exe
Resource
win7-20240705-en
General
-
Target
7878f3d5a97506309f73a2352f8eee9b_JaffaCakes118
-
Size
1.1MB
-
MD5
7878f3d5a97506309f73a2352f8eee9b
-
SHA1
d03dd54d4b87efd812e8a2c67e3a8f1921c94144
-
SHA256
c8b82be3ecc26626a5ad5082f67c32aaa331528f5f70a8f8ad8c64cd2dd30c97
-
SHA512
6a3d2b70853edb2f1ab9e4dc3e0e3fafae0a06fa499bc195e43a3bcd42a4d0b9b59756c652bc4205cdaeba5db019d54863091792376f7d22de1c51eb08b7c26e
-
SSDEEP
24576:UiewRc+TqdICBFU/6G+N4OB2Ouv2EHdzPH/NlIDe6ki4fjo:rAiqJ29+N4JOCdzPFy74fc
Malware Config
Signatures
-
resource yara_rule static1/unpack001/s0m_inst.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/s0m_inst.exe
Files
-
7878f3d5a97506309f73a2352f8eee9b_JaffaCakes118.zip
-
s0m_inst.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE