Static task
static1
Behavioral task
behavioral1
Sample
4196a84a0e39cb22506b0324facfd7580dc8872a21e2d45697425df416984685.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4196a84a0e39cb22506b0324facfd7580dc8872a21e2d45697425df416984685.exe
Resource
win10v2004-20220812-en
General
-
Target
4196a84a0e39cb22506b0324facfd7580dc8872a21e2d45697425df416984685
-
Size
1.0MB
-
MD5
02f11b91e8c55fe7d3a9be580163e773
-
SHA1
48478637c051773501c8b5dbd364b2e20e4cab46
-
SHA256
4196a84a0e39cb22506b0324facfd7580dc8872a21e2d45697425df416984685
-
SHA512
e65bed1630c2d91efc71713d222231d0b7c0d6ff57bf69ce1d07fb1ba647cc2129588f9a7c69c58822f9b5029d3dfc9f4ab41cf13855381be04d6f1bd6ded03c
-
SSDEEP
24576:BxqT31T6WE6I5jKqosOm9bn1NrNTA6PNTA6Osj1YEcycn:w6WE6IN959bn7R313Oe1Pcr
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
4196a84a0e39cb22506b0324facfd7580dc8872a21e2d45697425df416984685.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ