Behavioral task
behavioral1
Sample
7afea8d5973c78107d3b649734d11a30.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7afea8d5973c78107d3b649734d11a30.exe
Resource
win10v2004-20231215-en
General
-
Target
7afea8d5973c78107d3b649734d11a30
-
Size
1.4MB
-
MD5
7afea8d5973c78107d3b649734d11a30
-
SHA1
0ec435d2a29bfb3c7972cf237fbe480a646979a4
-
SHA256
e27b8fb19197908ea67bdf1ac26798e2d4d3373dbec695ac7ddf8656edc94b46
-
SHA512
4a88c620d634b79bda57cc291cb707f1bf180cf26830a6756f6f65f77fb4831715891d8567a87342c38dd6006274241400c0c5095b33985f5a3e20eb2264cd11
-
SSDEEP
24576:cc2ryNv5aXxUG23RibQl7LTFJjlyiwM40PnCJXxEDOyxpNbmNDuy9Wb8:EryjSxM3RibOJjf40CJhEDOIuS8
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7afea8d5973c78107d3b649734d11a30
Files
-
7afea8d5973c78107d3b649734d11a30.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE