Behavioral task
behavioral1
Sample
feb401a6f939f7c732fd8e38053439b5b325fa55ff66fe5d46d4f6f5b69757d5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
feb401a6f939f7c732fd8e38053439b5b325fa55ff66fe5d46d4f6f5b69757d5.exe
Resource
win10v2004-20220812-en
General
-
Target
feb401a6f939f7c732fd8e38053439b5b325fa55ff66fe5d46d4f6f5b69757d5
-
Size
568KB
-
MD5
e0826c50536fa3e862a095623d350034
-
SHA1
586ffd7b6fd36a7f4970b9cad8b60bda437584cd
-
SHA256
feb401a6f939f7c732fd8e38053439b5b325fa55ff66fe5d46d4f6f5b69757d5
-
SHA512
16856c1071cff444227434b6c9814d80c6fab195eeeefebf2c8fe6a2b4905cfa3153f65e3c94a2acdab3f1e39c0cec4ad8940bbf3773cb47df4376d10f368d19
-
SSDEEP
12288:Zqh/M8VWVlVrN06rAXUU0hAB84JLgHZMk64:Zqh/M8wltjN4dgKkx
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
feb401a6f939f7c732fd8e38053439b5b325fa55ff66fe5d46d4f6f5b69757d5.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 732KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 255KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 493KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ