Static task
static1
Behavioral task
behavioral1
Sample
9343645da4b62d445cbeccf7e7b3d68bc1d941d8929146d39201fd28ef7ea346.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9343645da4b62d445cbeccf7e7b3d68bc1d941d8929146d39201fd28ef7ea346.exe
Resource
win10v2004-20220812-en
General
-
Target
9343645da4b62d445cbeccf7e7b3d68bc1d941d8929146d39201fd28ef7ea346
-
Size
571KB
-
MD5
5c9de3431a6dce8fac6095d61f4d5ded
-
SHA1
681fadb56913234f47ff7f5e5e4d99be0af0827c
-
SHA256
9343645da4b62d445cbeccf7e7b3d68bc1d941d8929146d39201fd28ef7ea346
-
SHA512
9187896f1cb852c8557ab18d3b74281f0f3b6c7cfdce3bdfe218bc8ac05ab740e37701d1d78df68fa11bae83e98739bec7a55d15884ef8fbcd47464312efafca
-
SSDEEP
6144:oOA4Ymm1zbo7/8JeJfEuGs8k/bUlgqjpJDHCq17WSTLp980sbpy3KR/ie5bBb2Y:oI2lbo4JeJfEuGstgg/kjp98zHpie5t
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
9343645da4b62d445cbeccf7e7b3d68bc1d941d8929146d39201fd28ef7ea346.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE