Behavioral task
behavioral1
Sample
b393e6e9c842a1157456c4fe0b66c6606a22d92b7ee4ace8155046cd055e9a61.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b393e6e9c842a1157456c4fe0b66c6606a22d92b7ee4ace8155046cd055e9a61.exe
Resource
win10v2004-20220812-en
General
-
Target
b393e6e9c842a1157456c4fe0b66c6606a22d92b7ee4ace8155046cd055e9a61
-
Size
662KB
-
MD5
a0a0be8f11081c93f57f00a861ac4df5
-
SHA1
1fd10de151cd4c8c046607b1275552a1b4bd88c1
-
SHA256
b393e6e9c842a1157456c4fe0b66c6606a22d92b7ee4ace8155046cd055e9a61
-
SHA512
de4356a59e02110d3cd6605a48ce1c79ef910658b808412fa03174b53f824cdd628ead693785b9bcb8c3ae73fb2982516596269a422693856d3fb6632b6db1e9
-
SSDEEP
12288:GozbhROlQW/zqrPkFtpYGjn5MlZ1GP5TiUOtOIvVQRxgHP:GocNvqI0Z1GPiVu+v
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
b393e6e9c842a1157456c4fe0b66c6606a22d92b7ee4ace8155046cd055e9a61.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 509KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ