Behavioral task
behavioral1
Sample
d5089d75f8ea20bb0dc9bcb3de53e6579d6e9fc2167feaacf912b1e68b9cbb83.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5089d75f8ea20bb0dc9bcb3de53e6579d6e9fc2167feaacf912b1e68b9cbb83.exe
Resource
win10v2004-20220812-en
General
-
Target
d5089d75f8ea20bb0dc9bcb3de53e6579d6e9fc2167feaacf912b1e68b9cbb83
-
Size
248KB
-
MD5
8056a5414a58f1f3302f0e334393d580
-
SHA1
c0ea0ab3a5758bcf82ce648832a5fb046467543c
-
SHA256
d5089d75f8ea20bb0dc9bcb3de53e6579d6e9fc2167feaacf912b1e68b9cbb83
-
SHA512
f03c031b013b23374a26c5869ba2a6fe48bd49cdfd9cdb5c362fe715a887cf0adaee21e7ee1f3d5d55648e27a730eac87fa30ae64083dd071c7dbffdd07403cc
-
SSDEEP
6144:2uMJWY+qaHEQCcYfSBYJbQCjRcqESEgm6Anhc1kG6EmRzxS:2+YcUc6SBLLTSEgBAnhc1kGsxS
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
d5089d75f8ea20bb0dc9bcb3de53e6579d6e9fc2167feaacf912b1e68b9cbb83.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 399KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ