Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Damaged.Gen2.22848.8468.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Damaged.Gen2.22848.8468.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan.Damaged.Gen2.22848.8468.exe
-
Size
656KB
-
MD5
226b01b986bd528e844e4a1f3ffbeb0e
-
SHA1
8eb49aec8bf80fcb3bf3f3f87608f9386765b4cd
-
SHA256
e17d010a1e42b0bb77610bc40421a25090f9aaf312742cce7b7a0b22c9b8c8f2
-
SHA512
3ea073aad1ff7f18cc4d9fca110815f420e29d27b4ef275c258fe4687d0a4541890e3f1db4ea99bfa052bed304cf0ae1383fbbb1d2d7837323fb04af799c0de4
-
SSDEEP
6144:ZR2WZ3iDn1zD4dYZnp9rwrlUHETV/0YfBdAgV+pqtIUm/jhMRXbm7N:ZRZyD1zD4dyUrlmExH3Vqqt4aRbM
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
SecuriteInfo.com.Trojan.Damaged.Gen2.22848.8468.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ