Behavioral task
behavioral1
Sample
038d41d1da8b7b1d7dfb657e0067533c816ada2d84cdbb5e0190c33d90d65d0c.exe
Resource
win7-20220812-en
General
-
Target
038d41d1da8b7b1d7dfb657e0067533c816ada2d84cdbb5e0190c33d90d65d0c
-
Size
1.2MB
-
MD5
80f5e15403f7f1e98ac7785b0439e28a
-
SHA1
6272c923d18d1788831a282d0f8b9bc7de692e77
-
SHA256
038d41d1da8b7b1d7dfb657e0067533c816ada2d84cdbb5e0190c33d90d65d0c
-
SHA512
970e450e249a2e47383de866987d847473f04860695f408d7b8b6268e22de59498aa8accf6ff800c34e32906f76163534a7408e31235601a9acd9342df425beb
-
SSDEEP
24576:6ozWu355vGPEB87He8fAIwgw4lAAx9Bhmroy1VrTBbnF9NC1yUfz1hQLG1+s9uG:6ozW+OEmHe8fAIwgw4lAAx9Bhm3rTA
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
038d41d1da8b7b1d7dfb657e0067533c816ada2d84cdbb5e0190c33d90d65d0c.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 536KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ