Behavioral task
behavioral1
Sample
JpjLalrj.exe
Resource
win11-20240802-en
General
-
Target
JpjLalrj.exe
-
Size
13.2MB
-
MD5
efc29096d75446cea20deee96ba9fd2b
-
SHA1
243203b0aedc56f99363fcf913bee4df660f4c6f
-
SHA256
23956100fab09face4597d96a568d6ff58f01fa0660328ba1130e52543d1b175
-
SHA512
71f39e4fd68d8a7096e040ec8b84cdf4b7e03aa8b12b5682b8d738f29b921db7a3c18e7a132ab766225fb1f5baa74ea011e1b51fed287b0bfe73fcfa85773db6
-
SSDEEP
98304:HfIhCHH/QU+YExEZHLkriaJAlrFi4sckFL5n+dpkor8cbkdJlW3yXAI90:z/QKgEMFJAlJMcgLapJr8wkdJlpXAIa
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JpjLalrj.exe
Files
-
JpjLalrj.exe.exe windows:6 windows x64 arch:x64
Password: K1DDJB_JNYUT8_26PMSI_RKT2CY_4QJFAXv
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 669KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 10.7MB - Virtual size: 10.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ