Behavioral task
behavioral1
Sample
052dca4820559afcefaa0fc6769f8095e160d887a1e08e9393e4da9d3fa2a7eb.exe
Resource
win7-20240903-en
General
-
Target
052dca4820559afcefaa0fc6769f8095e160d887a1e08e9393e4da9d3fa2a7eb.exe
-
Size
756KB
-
MD5
a14a692229ddbfa219cec344079da149
-
SHA1
44502f867c662e95710b72c78f754ff24e1b8f1b
-
SHA256
052dca4820559afcefaa0fc6769f8095e160d887a1e08e9393e4da9d3fa2a7eb
-
SHA512
ea4640269126ef3aec115d19fc281f28eada67c509765327ce14c9150f217e459beab547dca9a9b20fa4d2ace138a55a428266960989b3ed3bd04cef4b5f207a
-
SSDEEP
12288:tz7hU5I5yuNHIgzSFKxWltRohBfSTso93U9w3cKWoq2y3bvbiJeQvQK8hj3wErvW:tf+iN57Gtene325KWd2ObgeQGhj7vqdH
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule static1/unpack001/out.upx autoit_exe -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 052dca4820559afcefaa0fc6769f8095e160d887a1e08e9393e4da9d3fa2a7eb.exe unpack001/out.upx
Files
-
052dca4820559afcefaa0fc6769f8095e160d887a1e08e9393e4da9d3fa2a7eb.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 924KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 384KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 619KB - Virtual size: 618KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ