Behavioral task
behavioral1
Sample
07aec06ee735dda73c12f33ddd46e829.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07aec06ee735dda73c12f33ddd46e829.exe
Resource
win10v2004-20231215-en
General
-
Target
07aec06ee735dda73c12f33ddd46e829
-
Size
730KB
-
MD5
07aec06ee735dda73c12f33ddd46e829
-
SHA1
a11a1ab8d717fab01c6c465b6e3b8d9294318053
-
SHA256
863ecab84ed07995d7f32a59b423ddd9290199f7542e2ea95231f39f66d68aea
-
SHA512
140fb93369edc95eec34654537ffeee0d337d6a64ea32d269c4d4823fc5b4ed3ec3e12d416c7e77a6193533f4f382c5ef7bc6fbacda72952a8c60e8868fb321d
-
SSDEEP
12288:36SKqT31T6WpJY6V765jKqostkm3eGkb8TnNi6YW7PweGb:qxqT31T6WE6I5jKqosOmHkb4om7PweGb
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07aec06ee735dda73c12f33ddd46e829
Files
-
07aec06ee735dda73c12f33ddd46e829.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE