Behavioral task
behavioral1
Sample
54de4874a226ad26f7436fbd622092494c2677db5606f05929e94ce1578c83e1.exe
Resource
win7-20220812-en
General
-
Target
54de4874a226ad26f7436fbd622092494c2677db5606f05929e94ce1578c83e1
-
Size
579KB
-
MD5
d0d49c451d8cf56d8b5f85877dbda1d6
-
SHA1
941bc8348b7f0a7f6aa51eb6c6f821d5d90f60ff
-
SHA256
54de4874a226ad26f7436fbd622092494c2677db5606f05929e94ce1578c83e1
-
SHA512
4ed45189a19bfd6936ecd51d4def11b107e6a28b4ac111d901524437945aa558007ceb2a94f7af147bb9df5c2148b217ca7077e38b659375e4ba42d905c61bf7
-
SSDEEP
12288:Xjtju6APFo38dPbUpLbQJNBWQ4KiKx7wNFKyrXBBAZ2KPnp:vAPq3SbUeXWKx7wHK44ZJ
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
54de4874a226ad26f7436fbd622092494c2677db5606f05929e94ce1578c83e1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ