Static task
static1
Behavioral task
behavioral1
Sample
8492772ab8cba85be77602b00a06b8cc46c2beeecca0c8d52f6b141dc5d50e26.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
8492772ab8cba85be77602b00a06b8cc46c2beeecca0c8d52f6b141dc5d50e26.exe
Resource
win10v2004-20220414-en
General
-
Target
8492772ab8cba85be77602b00a06b8cc46c2beeecca0c8d52f6b141dc5d50e26
-
Size
907KB
-
MD5
77f36f1ae786cf0835ce574b81668db6
-
SHA1
0987f5681d484ad149890a585766a013cf3b64b3
-
SHA256
8492772ab8cba85be77602b00a06b8cc46c2beeecca0c8d52f6b141dc5d50e26
-
SHA512
be477e9ab39c00adc55a24fe4893f835e1475ede17a4632c9359d31064f870edf9639c51550615bfce82e34f5265ab01880099550fa1a4b4d6c9d8be95cdd27a
-
SSDEEP
24576:9BXu9HGaVHwfno3hIaghdaf1d0B2mD6Iz0P:9w9VH4EhIbhqcV6Izw
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
8492772ab8cba85be77602b00a06b8cc46c2beeecca0c8d52f6b141dc5d50e26.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 563KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 562KB - Virtual size: 561KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ