Static task
static1
Behavioral task
behavioral1
Sample
156cf3771e057be59acd98e417f5106963c1d217fc2ba35217a42605154c73c5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
156cf3771e057be59acd98e417f5106963c1d217fc2ba35217a42605154c73c5.exe
Resource
win10v2004-20220812-en
General
-
Target
156cf3771e057be59acd98e417f5106963c1d217fc2ba35217a42605154c73c5
-
Size
884KB
-
MD5
a8d54a6fc84f99fba7109fbe72afb27b
-
SHA1
5cccf58c7b02073c7862640e378b902653ba192c
-
SHA256
156cf3771e057be59acd98e417f5106963c1d217fc2ba35217a42605154c73c5
-
SHA512
df389f3e09de5a8abb7d813546c7fdff5b535a6c60d1bc23b3c1e37c778eb5fa5ff8eca5b1e0997373bf9bd04623d9e39dddcfb5807950624bca85b5b01c3348
-
SSDEEP
12288:Utb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNuPPpHSgadTVp6A8:Utb20pkaCqT5TBWgNQ7aZVp6A
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
156cf3771e057be59acd98e417f5106963c1d217fc2ba35217a42605154c73c5.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 872KB - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ