Behavioral task
behavioral1
Sample
7feec209fa4fa08b97978de6f39301c7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7feec209fa4fa08b97978de6f39301c7.exe
Resource
win10v2004-20231215-en
General
-
Target
7feec209fa4fa08b97978de6f39301c7
-
Size
324KB
-
MD5
7feec209fa4fa08b97978de6f39301c7
-
SHA1
69b2434ed087b5d349eb71bbf7a7f597728641db
-
SHA256
6dde9381a44bc7ef5d14c1b5347efa5cb42717530615a3cce559725a444619a3
-
SHA512
63046bd383cf07a7e88acf3b6c896380404063e1cfd0150a1ff9b154f24ad21655373f7b051f80ea1a9fa880ef0a421d0fa319ffa738b41d168d740450458af9
-
SSDEEP
6144:Z1db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe/ZVbvRcdzGBs:ZjkArEN249AyE/rbaMct4bO2/RR/s
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7feec209fa4fa08b97978de6f39301c7 unpack001/out.upx
Files
-
7feec209fa4fa08b97978de6f39301c7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ