Behavioral task
behavioral1
Sample
EasyIRPJ.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
EasyIRPJ.exe
Resource
win10v2004-20230915-en
General
-
Target
EasyIRPJ.exe
-
Size
17.5MB
-
MD5
a5e97072a5c1791525436cebc7c53d2e
-
SHA1
01c017b3c5506c8e2de0b611f1c64a90f6149067
-
SHA256
68209de182eec311f847a7a38b8307661424aec644e0b95585acf40c0c51ebda
-
SHA512
26f429e18d23cd1956779fbad5132ef84b1d120e6e67461a3dc8f1d8e3c6716bb021992234337ba05b8e7818ed7bd0fa5f5a02767f2c447595b432b9038eda8b
-
SSDEEP
393216:ozHMf4jIpCADDmbepOY70TE9CiDpjmOOi:T8IgADDmiT0IoAzO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EasyIRPJ.exe
Files
-
EasyIRPJ.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 57.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17.5MB - Virtual size: 17.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE