Behavioral task
behavioral1
Sample
59b8aed25c0da6044f8be400c8b7072b291e221572efa232f934bbec4e6e6ddc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59b8aed25c0da6044f8be400c8b7072b291e221572efa232f934bbec4e6e6ddc.exe
Resource
win10v2004-20220812-en
General
-
Target
59b8aed25c0da6044f8be400c8b7072b291e221572efa232f934bbec4e6e6ddc
-
Size
381KB
-
MD5
07b91982e987938aa0f10f13c84173f2
-
SHA1
7fcecaa7c3179f44abf106d77f44c1c17b9ba388
-
SHA256
59b8aed25c0da6044f8be400c8b7072b291e221572efa232f934bbec4e6e6ddc
-
SHA512
ef5fabb0c575812e64e18b246b6a39999ca7393f1c7fd0f2c07694a39cc2198159cae5c46ef1363381ae142d2fe621a6d68bc4e7568322834ed96e1f8ea42f76
-
SSDEEP
6144:5bS0s1FVoL136QSFte3Tdb5ohszsih8J+DppkJzp7FLojRaa+Az4oMmFYSYuvhzH:BSLKL136QvD5ahDih8Je+N9ojoAFpjv9
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
59b8aed25c0da6044f8be400c8b7072b291e221572efa232f934bbec4e6e6ddc.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ