Static task
static1
Behavioral task
behavioral1
Sample
bitcoin_autopilot.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
bitcoin_autopilot.exe
Resource
win10v2004-en-20220112
General
-
Target
bitcoin_autopilot.zip
-
Size
551KB
-
MD5
722c0396a9e47a2dd0965c5c15e2c456
-
SHA1
506f7f0004f1f72a4b67a7178f76d88da328d02a
-
SHA256
81a7a67ddbd184f8b8f16f5de340028e81a949989462b75eed8cd168a84ad6c4
-
SHA512
f590f8dc6c48ac43837d70dde99b034bf6860558b49de9354dae7a90efab722ee1acaba4a804ce96b6804be026339aa586cb70530ec8ae84cd5475faa072bdb4
Malware Config
Signatures
Files
-
bitcoin_autopilot.zip.zip
Password: 955611
-
bitcoin_autopilot.exe.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 71KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 131KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6WEMbMD Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE