Static task
static1
Behavioral task
behavioral1
Sample
a1846ef522fcf21cf4c924d5b56e99a3e7aa5b2815fd0df71c504764cc93a0ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1846ef522fcf21cf4c924d5b56e99a3e7aa5b2815fd0df71c504764cc93a0ed.exe
Resource
win10v2004-20220812-en
General
-
Target
a1846ef522fcf21cf4c924d5b56e99a3e7aa5b2815fd0df71c504764cc93a0ed
-
Size
1.9MB
-
MD5
36ce0d7e409386c552f9436d9c2823b7
-
SHA1
524c002b7277afeb3cd3f3906c22c855b214d06c
-
SHA256
a1846ef522fcf21cf4c924d5b56e99a3e7aa5b2815fd0df71c504764cc93a0ed
-
SHA512
9b46d4c2e57836e7fcb544553bdaff8f7359c8a303d33dd9276c53076a3c553c130cdcc52117332cf1cf52c3911c94397e0d7e855ee7371e041ec323ee70bb09
-
SSDEEP
24576:+6nfIyPuWcbbatstcqBaHMv6Corjqny/QHwRhPdpaHMv6Corjqny/QHX0l:XfpPu3bUsqy1vqjd/QHgPz1vqjd/QHX
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
a1846ef522fcf21cf4c924d5b56e99a3e7aa5b2815fd0df71c504764cc93a0ed.exe windows x86
c74f8fe24a0e4c7b4b035639435ab85a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetEnvironmentVariableA
WriteFile
shell32
ShellExecuteA
Sections
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1024B - Virtual size: 561B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE