Behavioral task
behavioral1
Sample
Craagle/Craagle.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Craagle/Craagle.exe
Resource
win10v2004-20240709-en
General
-
Target
3a14e4a2d55bfcb739516d80e0198ad1_JaffaCakes118
-
Size
371KB
-
MD5
3a14e4a2d55bfcb739516d80e0198ad1
-
SHA1
7bf83d805338a52645321874fe85d9a5915a5bab
-
SHA256
ed84084e5c72282cf498f31f95d4be88dff9505d52c5ea0bbac15ead565f858b
-
SHA512
cc9cabc408d17c73da2a952cdd5a8865bf21ab1b80d0944bb79912b0a3814105c17c8cdc3410be86f475c4383745ca033ba6e8850ebdb62f6be9014f02ed2437
-
SSDEEP
6144:/tSjkM9upPRBFn0CzD/vOqkxkpLGHvswKkXMa8okC5DE4GF5At2Pf5IT5cdwFk06:/tSYLpB/DHO9kpE936oV5Zsa3k0to
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Craagle/Craagle.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Craagle/Craagle.exe
Files
-
3a14e4a2d55bfcb739516d80e0198ad1_JaffaCakes118.rar
-
Craagle/Craagle.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 367KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Craagle/Options.ini