Static task
static1
Behavioral task
behavioral1
Sample
f9fd94ab4bdb802f6a2f4386af6faa4232d7beda279b6d1f45cb407f6e8ba93d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9fd94ab4bdb802f6a2f4386af6faa4232d7beda279b6d1f45cb407f6e8ba93d.exe
Resource
win10v2004-20221111-en
General
-
Target
f9fd94ab4bdb802f6a2f4386af6faa4232d7beda279b6d1f45cb407f6e8ba93d
-
Size
592KB
-
MD5
c4d2e51fae9a09d529211b3c86c5b08d
-
SHA1
151f91bf0ef206daac13605f204f4a53c2108b08
-
SHA256
f9fd94ab4bdb802f6a2f4386af6faa4232d7beda279b6d1f45cb407f6e8ba93d
-
SHA512
ca7fd68d8dc669270cc354653dbe4f9176bab6ffc1affe1c662505e32e62bba6fd90373d499176e1a919284256da2f82e0856495e5461ed5b9ebde9b5338423c
-
SSDEEP
6144:m/8JeJfEuGs8k/bUlgqjpJDHCq17WSTLp980sbpy3KR/ie5bJsY+mNk:nJeJfEuGstgg/kjp98zHpie5VH6
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
f9fd94ab4bdb802f6a2f4386af6faa4232d7beda279b6d1f45cb407f6e8ba93d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.Red1 Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Red1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 108B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE