Static task
static1
Behavioral task
behavioral1
Sample
566e47da6e4d87d4e5fccbd846a5e1e8d764bb9b39e1ba0635b7c599df9c6946.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
566e47da6e4d87d4e5fccbd846a5e1e8d764bb9b39e1ba0635b7c599df9c6946.exe
Resource
win10v2004-20220812-en
General
-
Target
566e47da6e4d87d4e5fccbd846a5e1e8d764bb9b39e1ba0635b7c599df9c6946
-
Size
1.1MB
-
MD5
3011c81e7e494acbf41c0ca871f1ec27
-
SHA1
83595ec6f352af607cd6716aba34f50f6a8f5ef5
-
SHA256
566e47da6e4d87d4e5fccbd846a5e1e8d764bb9b39e1ba0635b7c599df9c6946
-
SHA512
c515d9ea673df9d3215ad599b4639691bd345c1db8cd856a3a6f9e6ab48e70e472736db20c3a7ee16ed4b5e2f5039f559aa967d2771d7476425133a1a0b6f45f
-
SSDEEP
6144://8JeJfEuGs8k/bUlgqjpJDHCq17WSTLp980sbpy3KR/ie5bBb2Y+YuxXYb:MJeJfEuGstgg/kjp98zHpie5ttqX0
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
566e47da6e4d87d4e5fccbd846a5e1e8d764bb9b39e1ba0635b7c599df9c6946.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.penask Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. rdata Size: 132KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ada Size: 28KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kninyhh Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
swwgqdg Size: 32KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE