Behavioral task
behavioral1
Sample
3f0529b960de2bbed500c74b78f95c8da5301eff4a0eeb25de53aaef107cc76a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f0529b960de2bbed500c74b78f95c8da5301eff4a0eeb25de53aaef107cc76a.exe
Resource
win10v2004-20220812-en
General
-
Target
3f0529b960de2bbed500c74b78f95c8da5301eff4a0eeb25de53aaef107cc76a
-
Size
903KB
-
MD5
934a9de3943771a7ae29f95941e72384
-
SHA1
57eb4b1bf0ab62eb7cb1cb15352f95526b9e221c
-
SHA256
3f0529b960de2bbed500c74b78f95c8da5301eff4a0eeb25de53aaef107cc76a
-
SHA512
84cb46963f3bdf75c8f1df03d6ee1b5a602fce637228910c9fec1fe01f3fc404014a4b48f6d90b21a6edc798ad60d9792df6b47f49cde756eb5f1ce58b88de3b
-
SSDEEP
12288:s6SKqT31T6WpJY6V765jKqostkm3RbRNRFC4m7vbwW+tu:dxqT31T6WE6I5jKqosOmhbXXo7bxr
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
3f0529b960de2bbed500c74b78f95c8da5301eff4a0eeb25de53aaef107cc76a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 285KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE