Behavioral task
behavioral1
Sample
Charaf.exe
Resource
win7-20240903-en
General
-
Target
3b8512517aad20db6af3a79d2be2022e_JaffaCakes118
-
Size
84KB
-
MD5
3b8512517aad20db6af3a79d2be2022e
-
SHA1
aebb38851c785e1871b34d1a3d72d97ae37486ae
-
SHA256
7467d89ec508103b54fffef254231e44a92c68c32309b2819f647e9ac1641dd2
-
SHA512
3fca93799e227b3767133f4f5854af1d8b96798eefaa515f2d0db69b22d704325e73ae7e245b277ef4c56da43f1d7e73665a798590abc4b41d8974c770b80593
-
SSDEEP
1536:NrzKAGenCMyAdHoHNU6Uy0eFPrYpHx6z6rhxJKR/1eOA+at9sFcwJKN84:ohf/UqPrYpHIurhxJ8KjX5CEn
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Charaf.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Charaf.exe
Files
-
3b8512517aad20db6af3a79d2be2022e_JaffaCakes118.cab
-
Charaf.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE