SecuriteInfo[.]com[.]Win32[.]Malware-gen[.]10660[.]18305[.]exe

General

Target
SecuriteInfo.com.Win32.Malware-gen.10660.18305.exe
Size 756KB
Sample240913-vxjsfszakd
SHA256 052dca4820559afcefaa0fc6769f8095e160d887a1e08e9393e4da9d3fa2a7eb
MD5 a14a692229ddbfa219cec344079da149
SHA1 44502f867c662e95710b72c78f754ff24e1b8f1b
SHA512 ea4640269126ef3aec115d19fc281f28eada67c509765327ce14c9150f217e459beab547dca9a9b20fa4d2ace138a55a428266960989b3ed3bd04cef4b5f207a
SSDEEP 12288:tz7hU5I5yuNHIgzSFKxWltRohBfSTso93U9w3cKWoq2y3bvbiJeQvQK8hj3wErvW:tf+iN57Gtene325KWd2ObgeQGhj7vqdH
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
static1/unpack001/out.upx	autoit_exe

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Malware-gen.10660.18305.exe
unpack001/out.upx

File Explorer

SecuriteInfo.com.Win32.Malware-gen.10660.18305.exe

.exe 756KB
out.upx

.exe 1.2MB

SecuriteInfo.com.Win32.Malware-gen.10660.18305.exe

SHA256 052dca4820559afcefaa0fc6769f8095e160d887a1e08e9393e4da9d3fa2a7eb
MD5 a14a692229ddbfa219cec344079da149
SHA1 44502f867c662e95710b72c78f754ff24e1b8f1b
SHA512 ea4640269126ef3aec115d19fc281f28eada67c509765327ce14c9150f217e459beab547dca9a9b20fa4d2ace138a55a428266960989b3ed3bd04cef4b5f207a
SSDEEP 12288:tz7hU5I5yuNHIgzSFKxWltRohBfSTso93U9w3cKWoq2y3bvbiJeQvQK8hj3wErvW:tf+iN57Gtene325KWd2ObgeQGhj7vqdH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

1328800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 1d9b7f1f7e7f2cf9cf725ad286ef1371379e8a050c3241aff21d387faaa66136
MD5 badf4673c33d714b11ca0e0082eb9bb8
SHA1 176c2a7132f78de7dc87ec55fd2bbf6fe5b6b3a7
SHA512 bdab32a0878b639c020c4aae7dd8b67bb19ee6aa4c7a66a198e2464885dbcee868f85b95d2b81f4b9c01be61d70118aba0e5a7463db1390984f22b995e0f7419
SSDEEP 24576:a5EmXFtKaL4/oFe5T9yyXYfP1WAXQKWd2ObgeQGhj7vqdH:aPVt/LZeJbInIRKW0dej7v
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
AutoIT Executable

AutoIT scripts compiled to PE executables.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

132343

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

SecuriteInfo.com.Win32.Malware-gen.10660.18305.exe

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.Malware-gen.10660.18305.exe

generic

out.upx

generic