Behavioral task
behavioral1
Sample
d8e8ec37cde14119b41de146291e2513.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d8e8ec37cde14119b41de146291e2513.exe
Resource
win10v2004-20240426-en
General
-
Target
d8e8ec37cde14119b41de146291e2513.exe
-
Size
775KB
-
MD5
d8e8ec37cde14119b41de146291e2513
-
SHA1
10bb501bcf083971fec0dd442f51f5971c022c37
-
SHA256
27c0352770c45cc190f6edee81ecb8f1d0a4388fe33d7e6f0e9e72ac35c02141
-
SHA512
56cb12868987a8635ed229864ef3a67b23880b1c5e4ab6d41752eb5b500003def636ec774e102bf9ab4f1d5eb7719c35f4d1c2410f8c85c60fde97303f9b107e
-
SSDEEP
12288:lhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcxoLiTdl:zRmJkcoQricOIQxiZY1aoLiTdl
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8e8ec37cde14119b41de146291e2513.exe
Files
-
d8e8ec37cde14119b41de146291e2513.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE