Static task
static1
Behavioral task
behavioral1
Sample
4380e89756c0aa7aae10fbd72936cc86c97881f99879b2234774beb9dddec649.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4380e89756c0aa7aae10fbd72936cc86c97881f99879b2234774beb9dddec649.exe
Resource
win10v2004-20220901-en
General
-
Target
4380e89756c0aa7aae10fbd72936cc86c97881f99879b2234774beb9dddec649
-
Size
896KB
-
MD5
1179fb2ddae85df4e5b7b9cad940bcf0
-
SHA1
c16398bb770770d070eae6633a190d9e7ef13af5
-
SHA256
4380e89756c0aa7aae10fbd72936cc86c97881f99879b2234774beb9dddec649
-
SHA512
1e09b4add1bd3835a42f863ed95d19a5f24f86c1cb4979baacb5a4617482d910ac68bb9d9be09985136a4f5b995a89ba8ca1f5770df3eb61a980f36281e1b073
-
SSDEEP
12288:Rtb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNuPPpHSga+TrJ6Al:Rtb20pkaCqT5TBWgNQ7amrJ6A
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
4380e89756c0aa7aae10fbd72936cc86c97881f99879b2234774beb9dddec649.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 884KB - Virtual size: 881KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ