Behavioral task
behavioral1
Sample
2edad148b90abc3a27d6456e6c7665d8f0b70e412028152e506e0d700a544f1b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2edad148b90abc3a27d6456e6c7665d8f0b70e412028152e506e0d700a544f1b.exe
Resource
win10v2004-20221111-en
General
-
Target
2edad148b90abc3a27d6456e6c7665d8f0b70e412028152e506e0d700a544f1b
-
Size
409KB
-
MD5
e8d58027771f86ff014e2571c91c77fd
-
SHA1
36790f48e6d9f2e6de9a531e0286a7bf8b1e761f
-
SHA256
2edad148b90abc3a27d6456e6c7665d8f0b70e412028152e506e0d700a544f1b
-
SHA512
e2ba0e9ba3c90df14c16e40dc7527bb49f714250f257c9802dfb3c62f0c357a75eaffa887c78b4b3cdc976d5defa2d5efc4ab4c78aec28a1e87376792e8055cf
-
SSDEEP
6144:P0TpJ7+/8N180QCeH70pIp895pAn9Mw030jZMKI0/SPewJKLB79e6tjuYAHSsM:437Ai11QCGOLpAn9nt1KkjwajuRrM
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
2edad148b90abc3a27d6456e6c7665d8f0b70e412028152e506e0d700a544f1b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ