Behavioral task
behavioral1
Sample
d47bdc81827e1e181a075f5f03362ec1a94f01f5f652e3bbbc8142e4498e1c47.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d47bdc81827e1e181a075f5f03362ec1a94f01f5f652e3bbbc8142e4498e1c47.exe
Resource
win10v2004-20220901-en
General
-
Target
d47bdc81827e1e181a075f5f03362ec1a94f01f5f652e3bbbc8142e4498e1c47
-
Size
410KB
-
MD5
af6cef55d7542683e203229e68d752f4
-
SHA1
2f9416f05a16af9bf93f461d9beb166056178e43
-
SHA256
d47bdc81827e1e181a075f5f03362ec1a94f01f5f652e3bbbc8142e4498e1c47
-
SHA512
e0c5e3c804ffd5afec2553d42fc19af27d8f26fc5bff0311bfac4eaf25c8bf4f43ee291aefc091e7a5e65c8271dad8e18225738c6ea7eb976c8f745d90c67d9f
-
SSDEEP
12288:XnNhuBoY8SorxgmA+nlvVlQ34dRJ+mu2lMp:XPatCg7EPyg/u2lQ
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
d47bdc81827e1e181a075f5f03362ec1a94f01f5f652e3bbbc8142e4498e1c47.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ