Behavioral task
behavioral1
Sample
7e80b5a707a09078e8a968aba8716e71ef349622f3bed0e608f18fe26787c6a4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7e80b5a707a09078e8a968aba8716e71ef349622f3bed0e608f18fe26787c6a4.exe
Resource
win10v2004-20230703-en
General
-
Target
7e80b5a707a09078e8a968aba8716e71ef349622f3bed0e608f18fe26787c6a4
-
Size
543KB
-
MD5
ac7f0c086a0fd4eedde0b134afbe7581
-
SHA1
0f5a80f9b86fd813595c48985d43c711d8744f19
-
SHA256
7e80b5a707a09078e8a968aba8716e71ef349622f3bed0e608f18fe26787c6a4
-
SHA512
1ff134b637708ebee0017ce90465f4a2f89c9c51351dac31d85dab338f78397c8b8e66ef980fa9821918569ce07cd5228229e157588ed395f5fdcb15ecd37303
-
SSDEEP
6144:N0Vkyu8VUG3AOOOeis7t3rzXtiChouehDajqWBbfinQ59ol7GS667DdnmmLyg:6FVVn3RKt3fotJaR1finQ7oH667VLyg
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e80b5a707a09078e8a968aba8716e71ef349622f3bed0e608f18fe26787c6a4
Files
-
7e80b5a707a09078e8a968aba8716e71ef349622f3bed0e608f18fe26787c6a4.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 520KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE