Behavioral task
behavioral1
Sample
82112544fc9f81ccab9fbc8c8f1614b92091b87171f925a0e39b8c5694f23369.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82112544fc9f81ccab9fbc8c8f1614b92091b87171f925a0e39b8c5694f23369.exe
Resource
win10v2004-20220812-en
General
-
Target
82112544fc9f81ccab9fbc8c8f1614b92091b87171f925a0e39b8c5694f23369
-
Size
964KB
-
MD5
615df21a56a0808841a781755c4e5e70
-
SHA1
6079cfbb1816cb7992ae472fe805b54a9a3cf03c
-
SHA256
82112544fc9f81ccab9fbc8c8f1614b92091b87171f925a0e39b8c5694f23369
-
SHA512
040962c0fe921cb8c1cadbcc4e76e40977080e83f500144beb4c59b40337907649904c01557d6c55b6d8ba3c3526bd15876b89479909406a5a7c04d8529464da
-
SSDEEP
24576:CthEVaPqLfq0df9k3C6QTnARS6jT01bi4v+PRzu97bDLFfi6WUrALUgx9RO:aEVUcy0jB
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
82112544fc9f81ccab9fbc8c8f1614b92091b87171f925a0e39b8c5694f23369.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 536KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 514KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ