Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Agen.JSAV-4966.14353.7502.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Agen.JSAV-4966.14353.7502.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.W32.Agen.JSAV-4966.14353.7502.exe
-
Size
584KB
-
MD5
4cf944d495af684d93c14aa61710e898
-
SHA1
a6d28481761f614cba598683f83af7aada91c2f3
-
SHA256
b863bc2781ab7112b5cf4acff28aa2e429e2c3e2be79afc042a7bdd2e7f79cf8
-
SHA512
20e495358dea976ad2c9e31d563309eeee0030c40ee9cb3e08300b763d6da4d9c5aa9a57558d83a5f162d72d8d957eadd5e08d8143861548c9d0696c06ce73d5
-
SSDEEP
6144:eR2WZ3iDn1zD4dYZnp9rwrlUHETV/0YfBdAgV+pqtIUm/jhMRXbm7N:eRZyD1zD4dyUrlmExH3Vqqt4aRbM
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe
Files
-
SecuriteInfo.com.W32.Agen.JSAV-4966.14353.7502.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ