Static task
static1
Behavioral task
behavioral1
Sample
a0961cf0998a1e67b14c2d4a9d118041daedc99a1f90870d6e5e09a292d03009.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0961cf0998a1e67b14c2d4a9d118041daedc99a1f90870d6e5e09a292d03009.exe
Resource
win10v2004-20220812-en
General
-
Target
a0961cf0998a1e67b14c2d4a9d118041daedc99a1f90870d6e5e09a292d03009
-
Size
847KB
-
MD5
a086dea1274fce6cbc1face155242e00
-
SHA1
b9595bae90daa4351562a35db2218ce47bd2425c
-
SHA256
a0961cf0998a1e67b14c2d4a9d118041daedc99a1f90870d6e5e09a292d03009
-
SHA512
f1bc6d294cb146af59b1e25cbba5249b29f5edf171b28546dfbc0d14bf2966bd8039d781f93e51eec2cbf82f2998b1667742347d5dbafa1d98a3e3058d4d4886
-
SSDEEP
24576:xxqT31T6WE6I5jKqosOm+bHtA9+bp1uzDeAtWJ1:A6WE6IN95+bHt3bps/esY1
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
a0961cf0998a1e67b14c2d4a9d118041daedc99a1f90870d6e5e09a292d03009.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64B - Virtual size: 5B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ