Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Agen.JSAV-4966.14818.15282.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Agen.JSAV-4966.14818.15282.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.W32.Agen.JSAV-4966.14818.15282.exe
-
Size
604KB
-
MD5
465cd4956c8671831ee2328906a3043a
-
SHA1
8366fa3bc88d8c844800c2ff707715dcddbe438d
-
SHA256
c3f521ca1e8830a1cd5cb3ace29ce3c8a0d7a1b19d8229e0bb3730189df2f2d6
-
SHA512
69f7d1a656e8371f8a8ea7d778beb061db1ddc642a8f0347bf41c139d46d2e8275f9cedbf980b07281cd92a728cf03ffe269066813d2fa0a6a561cde0fccebb7
-
SSDEEP
6144:UR2WZ3iDn1zD4dYZnp9rwrlUHETV/0YfBdAgV+pqtIUm/jhMRXbm7N:URZyD1zD4dyUrlmExH3Vqqt4aRbs
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
SecuriteInfo.com.W32.Agen.JSAV-4966.14818.15282.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ