Static task
static1
Behavioral task
behavioral1
Sample
f1757a17f3a6eb8fa71c10434ae570b1c64642755b6b675ade5fc1d35fe6ea0f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1757a17f3a6eb8fa71c10434ae570b1c64642755b6b675ade5fc1d35fe6ea0f.exe
Resource
win10v2004-20220901-en
General
-
Target
f1757a17f3a6eb8fa71c10434ae570b1c64642755b6b675ade5fc1d35fe6ea0f
-
Size
844KB
-
MD5
936dc6860ca45c657a4a7be8cdb99400
-
SHA1
c621b32a960bc468d55c45a8b880694fcd01cdb3
-
SHA256
f1757a17f3a6eb8fa71c10434ae570b1c64642755b6b675ade5fc1d35fe6ea0f
-
SHA512
e9271ce67f91946dbeb498c6185a8fec4edd690c57901e7562366a7c4b8a5a4ce679807a288f2e493a7282b671fcaab341860bbb41329ef5c043815d68d2775e
-
SSDEEP
6144:H/8JeJfEuGs8k/bUlgqjpJDHCq17WSTLp980sbpy3KR/ie5bDY+9i:UJeJfEuGstgg/kjp98zHpie5f
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
f1757a17f3a6eb8fa71c10434ae570b1c64642755b6b675ade5fc1d35fe6ea0f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vc++ Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vsp Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE