Static task
static1
Behavioral task
behavioral1
Sample
3a2994ab51639589c89fb98047f311ac24c00ab64ca65de97c2cc25a71815132.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a2994ab51639589c89fb98047f311ac24c00ab64ca65de97c2cc25a71815132.exe
Resource
win10v2004-20220812-en
General
-
Target
3a2994ab51639589c89fb98047f311ac24c00ab64ca65de97c2cc25a71815132
-
Size
1.2MB
-
MD5
03e68afa5fd3dc539da39540ca1ba200
-
SHA1
cd461cedb8ac27b4a891a5bd860e6cf24d6856be
-
SHA256
3a2994ab51639589c89fb98047f311ac24c00ab64ca65de97c2cc25a71815132
-
SHA512
10a4e5bfc52136ea78338e5757c3ddc70027888d089e8a7bc471e3b613fe570298f739b37ea3960a05c7a99299bdacd0e64e5553c911b80a7f09364d85dd8b28
-
SSDEEP
24576:SooAqNFj9raeZWDM36G6jn2IAlaq9csl7bW9xkv3ORsY:SoMFpraeZW64AlaMcUfWAv3ORsY
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
3a2994ab51639589c89fb98047f311ac24c00ab64ca65de97c2cc25a71815132.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.RC Size: 1024B - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RC Size: 97KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE