Behavioral task
behavioral1
Sample
e59c3eca24a73a8f29dcb6ead5af5b40dec0ca80d85a00f6083f7c66d81bbd1f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e59c3eca24a73a8f29dcb6ead5af5b40dec0ca80d85a00f6083f7c66d81bbd1f.exe
Resource
win10v2004-20220901-en
General
-
Target
e59c3eca24a73a8f29dcb6ead5af5b40dec0ca80d85a00f6083f7c66d81bbd1f
-
Size
455KB
-
MD5
8844e55bfc18bfd63d36c931f9ae0ed3
-
SHA1
c8f31cb057198ad0ee081d1bed409440b0a613e9
-
SHA256
e59c3eca24a73a8f29dcb6ead5af5b40dec0ca80d85a00f6083f7c66d81bbd1f
-
SHA512
85d4701894c5b8cbb7dba50882f307d01b3512c026e69580c39fef7930a8c4a6b75f8fc4053978ec1a4b18f46e3822b6a4448c068d643f26a938a6660730fbb1
-
SSDEEP
6144:x+nN0pEJitnhZA/8G6JDDYcXPlwpHejGuQHfI8hID7Jb+Vfl3pm7nPuB4kQgyd:EnNeEJwnhmX2DDYklwZ9gBpbCKLuu3gI
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
e59c3eca24a73a8f29dcb6ead5af5b40dec0ca80d85a00f6083f7c66d81bbd1f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ