Static task
static1
Behavioral task
behavioral1
Sample
4d0a65d31424f3f8e0324278141326332b9aff4cbc959b0ba6ec42c623778289.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
4d0a65d31424f3f8e0324278141326332b9aff4cbc959b0ba6ec42c623778289.exe
Resource
win10v2004-20230621-en
General
-
Target
4d0a65d31424f3f8e0324278141326332b9aff4cbc959b0ba6ec42c623778289
-
Size
2.3MB
-
MD5
b0ce90a8fb467c7db0f3e54488ba77f1
-
SHA1
3a4630167ddc8aa5f3bcb9442f6186a8e529f4db
-
SHA256
4d0a65d31424f3f8e0324278141326332b9aff4cbc959b0ba6ec42c623778289
-
SHA512
10ccd9ce9e87d252e62dab86d1df22b992a6bb4d362f800831632636e97ce61b3aaf6533b0ac154223a9302c8396c0fe02acb686ce385a13e22db4e8d4cdf350
-
SSDEEP
49152:QwaEODfKbUQ5edjecsxUbtHe3dcTCyZSvQg3sqfKUfEkmNu:Qw2DfKbAlsOxe3iTC/pJNEzu
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d0a65d31424f3f8e0324278141326332b9aff4cbc959b0ba6ec42c623778289
Files
-
4d0a65d31424f3f8e0324278141326332b9aff4cbc959b0ba6ec42c623778289.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 421KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ