Static task
static1
Behavioral task
behavioral1
Sample
94d499771c6425d41ba4a3cef3ba9754e24fbef24d920a15d7ba5c6657458873.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94d499771c6425d41ba4a3cef3ba9754e24fbef24d920a15d7ba5c6657458873.exe
Resource
win10v2004-20220812-en
General
-
Target
94d499771c6425d41ba4a3cef3ba9754e24fbef24d920a15d7ba5c6657458873
-
Size
1.2MB
-
MD5
53a5fcb1dbeb62615bb3fb8906316afd
-
SHA1
15946dee4607a1368385beb405a29939a421d7a9
-
SHA256
94d499771c6425d41ba4a3cef3ba9754e24fbef24d920a15d7ba5c6657458873
-
SHA512
169714dee1ab31f37f4ccb9669e72205de345fa32933d10a0c585d06b57d9b46e06c51bd969eb705561c8212cf2ecba704fe3d0942257454cb74fd366ba483c3
-
SSDEEP
12288:7pqiC/2OGAtkCP4cejGSOpRKnCzfPDZRQ:7po/2+ttPJLfpRKnCzftRQ
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
94d499771c6425d41ba4a3cef3ba9754e24fbef24d920a15d7ba5c6657458873.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 495KB - Virtual size: 495KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE