Behavioral task
behavioral1
Sample
bb637a61c5136f3ea86910b42008f6ec7d143a0e4c5e064834f02f123a769e68.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb637a61c5136f3ea86910b42008f6ec7d143a0e4c5e064834f02f123a769e68.exe
Resource
win10v2004-20220812-en
General
-
Target
bb637a61c5136f3ea86910b42008f6ec7d143a0e4c5e064834f02f123a769e68
-
Size
560KB
-
MD5
092b1f9c00a1a1741d1e688ea8e4ec85
-
SHA1
530e1edefd44485621fc6335996174ff9f860815
-
SHA256
bb637a61c5136f3ea86910b42008f6ec7d143a0e4c5e064834f02f123a769e68
-
SHA512
69022edc0f5ce1154baaa91adddcd790c3fb39c8aa94c066108e46c96ddab87465ca2e1cc18dc3b48f79a567f2fdd52bcdb15d4424a931d3c033487cb20212ca
-
SSDEEP
6144:ew2SkI96osag59d6cYdBN+r6PtN2YFZp6ZEW2ZO9Ce65V6uhtw6W8uwcoaJbECph:dvkI96/aOdIbNb2J9CR5V6ucZoaGCxim
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe
Files
-
bb637a61c5136f3ea86910b42008f6ec7d143a0e4c5e064834f02f123a769e68.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 720KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 268KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ