Static task
static1
Behavioral task
behavioral1
Sample
6c30ff0b8ea6db739b9796101b53c9710824caf727ce46282e53028b034d0758.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c30ff0b8ea6db739b9796101b53c9710824caf727ce46282e53028b034d0758.exe
Resource
win10v2004-20220812-en
General
-
Target
6c30ff0b8ea6db739b9796101b53c9710824caf727ce46282e53028b034d0758
-
Size
5.1MB
-
MD5
6d915926046b28bdf353bae0ea66a860
-
SHA1
16d896ed0b52708525f2fda76239eb310d5b70f1
-
SHA256
6c30ff0b8ea6db739b9796101b53c9710824caf727ce46282e53028b034d0758
-
SHA512
84c73d4864c2477c23dee220a45cfdeea17630590a1880552308b6d080d05a26e39e0288bdb39cf38ee0f1a398df0eebdbe6ed987c1921d032e61fd59fdd73ab
-
SSDEEP
98304:NgQzgBtrbTA1ttrbTA1mtrbTA1hg3trbTA1OtrbTA1lgQWYyA:NqTc1Pc1Yc16dc1wc1lc1
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
6c30ff0b8ea6db739b9796101b53c9710824caf727ce46282e53028b034d0758.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ