Behavioral task
behavioral1
Sample
ilaem.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ilaem.exe
Resource
win10v2004-20240226-en
General
-
Target
ilaem.exe
-
Size
232KB
-
MD5
ab80300c74cda92e86e89073a4942162
-
SHA1
cf23fc30452a51ccf16fae046dcd54fb6632d5e3
-
SHA256
54ef3ec0fd299659fbbd2f7b86f98229774abab5a1131e3067b92c7eaa599615
-
SHA512
9408945ac34d800baccde40545f62404d25491880e77dc96f81d2bf822db911322781f219cf86cc912cdf17572bc4607f813052eb10a45c3b52ddc445bdaac2b
-
SSDEEP
6144:NhbZ5hMTNFf8LAurlEzAX7o3wfSZ4sXPzQI:/tXMzqrllX7owMEI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ilaem.exe
Files
-
ilaem.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE