Behavioral task
behavioral1
Sample
a3cafa36a170067a55ffcf23fce4904c7dc74b197c51da7c4114899301675a24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3cafa36a170067a55ffcf23fce4904c7dc74b197c51da7c4114899301675a24.exe
Resource
win10v2004-20221111-en
General
-
Target
a3cafa36a170067a55ffcf23fce4904c7dc74b197c51da7c4114899301675a24
-
Size
487KB
-
MD5
06ca45638bf80d9928f583b0b8fd498c
-
SHA1
739271c1a88b318b24b543d4cad2cb67691a3347
-
SHA256
a3cafa36a170067a55ffcf23fce4904c7dc74b197c51da7c4114899301675a24
-
SHA512
d3cb5508dcd5685d044ceab56e82b261b529659c5ee4a20a4b17e6ba5c95c96ca0158e5a7ec1fcc482692e83977c7ed133e0b4674b1882b99b3a4631e73d7b72
-
SSDEEP
12288:5Ov5jKhsfoPA+yeVKUCUxP4C902bdRtJJPiqi0FR1RAZ:5q5TfcdHj4fmb3aZ
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
a3cafa36a170067a55ffcf23fce4904c7dc74b197c51da7c4114899301675a24.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 676KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 336KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 557KB - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ