Behavioral task
behavioral1
Sample
4662143f9b71c56d8c524274ec056679.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4662143f9b71c56d8c524274ec056679.exe
Resource
win10v2004-20231222-en
General
-
Target
4662143f9b71c56d8c524274ec056679
-
Size
792KB
-
MD5
4662143f9b71c56d8c524274ec056679
-
SHA1
da06bf4af6c46436ab40e8f0b24f6ebae4c4c96a
-
SHA256
53aae3cde3d2c7d2f653fcef1b313678cb07a158e749d88239aab7edf9fe0203
-
SHA512
5af30337812b2a612f442abd945302f3d3a72b7df5ecee1de3fb964a27b080e17906d271947686402f344010256714167584419082a972f1286cda20ea97bc73
-
SSDEEP
12288:nJeJfEuGstgg/kjp98zHpie5qquurWGDK9UyL+mneLyrc:nJeJfAqkjp98zHpie+TGDMUyyGZY
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4662143f9b71c56d8c524274ec056679
Files
-
4662143f9b71c56d8c524274ec056679.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oli Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE