Behavioral task
behavioral1
Sample
a9bfbc9a9a73607de1135391f723789612d1a86ba4b3fc66872e054e46894f99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9bfbc9a9a73607de1135391f723789612d1a86ba4b3fc66872e054e46894f99.exe
Resource
win10v2004-20220812-en
General
-
Target
a9bfbc9a9a73607de1135391f723789612d1a86ba4b3fc66872e054e46894f99
-
Size
271KB
-
MD5
4b6a7e0f0f51aea1754f08a8682d4094
-
SHA1
6e496d53c6e5b8d162c5e442c802e5b4ffca7fa0
-
SHA256
a9bfbc9a9a73607de1135391f723789612d1a86ba4b3fc66872e054e46894f99
-
SHA512
cffc2355a8d0e9dde1c2ad4f89ac881ad8779bbf1e99cf67d382bbc767db8cb12ba1f9ceecb45fc91c7a6e0dc1fab8e12c1cfd2a59da2e6b4d244b4106c49d82
-
SSDEEP
6144:4jn325g9LcO04S629EzDTZvxVK9tp4S9xnQNST:4j3229A5629EzXZvx89tWS92MT
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
a9bfbc9a9a73607de1135391f723789612d1a86ba4b3fc66872e054e46894f99.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 510KB - Virtual size: 510KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ