Static task
static1
Behavioral task
behavioral1
Sample
b4d965edf3419a47233552de81943492073f61e8e1acaf2dd939fe9cbbe09c99.exe
Resource
win7-20220901-en
General
-
Target
b4d965edf3419a47233552de81943492073f61e8e1acaf2dd939fe9cbbe09c99
-
Size
878KB
-
MD5
6524205f2029a82cb629027b3fce4000
-
SHA1
bbfb1f9ceef43c062500ddb8f5061be5a10c1332
-
SHA256
b4d965edf3419a47233552de81943492073f61e8e1acaf2dd939fe9cbbe09c99
-
SHA512
4306b4570fc0e5b78d19ff0e156c05c97e76a91d252d89fca46e5d502f5b940ca0e0c6967a99c7d706a6e51bf737c573a29e7b994ad8bab444d21040fb933dd4
-
SSDEEP
24576:1xqT31T6WE6I5jKqosOm9br8Z0xeKVBNv6I3T:M6WE6IN959br8K0KVvv6Q
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
b4d965edf3419a47233552de81943492073f61e8e1acaf2dd939fe9cbbe09c99.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ