Behavioral task
behavioral1
Sample
7acedb341174f39b6fecff98a4beae9734ddfc217622d046772f4705cb4e883b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7acedb341174f39b6fecff98a4beae9734ddfc217622d046772f4705cb4e883b.exe
Resource
win10v2004-20220812-en
General
-
Target
7acedb341174f39b6fecff98a4beae9734ddfc217622d046772f4705cb4e883b
-
Size
51.4MB
-
MD5
91ec8630c0e858bf3c1cf4939307baea
-
SHA1
b7ac747cd8325e20ec1aed23250bf3fbb7133df5
-
SHA256
7acedb341174f39b6fecff98a4beae9734ddfc217622d046772f4705cb4e883b
-
SHA512
84ed781df735509c96f81fa0cf980575ca21104734d1748145af06f77b3c025409bba58f4924cac259b183c505a65b611be2128780dc96f252f465a4ed6e3e26
-
SSDEEP
1572864:YjUzi+hu+ELsCr2qrY3fiS2geAoYdxtn+:sEigEgCr29i2edq8
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
7acedb341174f39b6fecff98a4beae9734ddfc217622d046772f4705cb4e883b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ