Behavioral task
behavioral1
Sample
indra.exe
Resource
win7-20240903-en
General
-
Target
ea7ef4030e14f9b600373a5d05661693_JaffaCakes118
-
Size
199KB
-
MD5
ea7ef4030e14f9b600373a5d05661693
-
SHA1
4d345b6c28ee5edba5b362448ee17764691133cb
-
SHA256
c6068873799502b22aa4da6f5adc5deb3a5aed944dda35e51f94db245e340309
-
SHA512
4159cbe3a8cabb875a355cca1b50213a094c41b7199e2ad31f964d5c6b02c653ea5b4b389c4d09e99e18e6524fbcdfda2f2c5da05d0b56cee197529699b05c42
-
SSDEEP
6144:7yfdIizq6M5kxhWsUGFiV88cxNvr4vdwh8RRv/d11V7dw:7uu6MyVna4xt4vaOHX6
Malware Config
Signatures
-
resource yara_rule static1/unpack001/indra.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/indra.exe
Files
-
ea7ef4030e14f9b600373a5d05661693_JaffaCakes118.zip
-
ChangeLog.txt
-
Disclaimer.txt
-
INDRA.TXT
-
file_id.diz
-
indra.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 197KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE