Static task
static1
Behavioral task
behavioral1
Sample
TerraMuLauncher.exe
Resource
win7-20240903-en
General
-
Target
d9eb3c6b1e98007510da9124f94238e8_JaffaCakes118
-
Size
1.5MB
-
MD5
d9eb3c6b1e98007510da9124f94238e8
-
SHA1
8f5700ec74c70228e5b7af042743f9b5c5454e16
-
SHA256
3472d4e1597dc952107e15e75daf460cdf99d180ec3871bea9ce4d9cae786473
-
SHA512
988bb885fa9188fb9057e5e1c211717e1cf2379a95621453b4bf7605b712b66c860b28def08dafb5fa21dd3c06fe83f47c7bcba86a8459378ac699c476dca06e
-
SSDEEP
24576:Ja9/ZOxK+6Nm99ZTReGDzvMwBQgr9vnAPsA6dcEFMQ6rC3cgtqkd/sDlqaIW:JyZOxKps9ZTEAvagxvnAPsTzFfEHkgqE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TerraMuLauncher.exe
Files
-
d9eb3c6b1e98007510da9124f94238e8_JaffaCakes118.rar
-
TerraMuLauncher.exe.exe windows:4 windows x86 arch:x86
58f289d37b2df80d6fea77b370a5a90a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SetEndOfFile
Sections
Size: 438KB - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
awzfuuhy Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sqtjnwvd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE