Static task
static1
Behavioral task
behavioral1
Sample
Acrobat.Pro.2023.x64.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Acrobat.Pro.2023.x64.exe
Resource
win10v2004-20230621-en
General
-
Target
Acrobat.Pro.2023.x64.exe
-
Size
1.7MB
-
MD5
17967a06f7e80a94789e43029e0c1805
-
SHA1
bbac693c35ef4924885ab253781a02ca2c57e09a
-
SHA256
71d92e20cdf124a08a5a7ac3f47d067322b6fc8bfe11d49f1f987fb23e628dd3
-
SHA512
5d716c44264d11000b86131510a2062eb6447d4cbf8c732c2ea0ee4974d3577c6f3fdc84303d846d458a830842b65959330c74c5e23f1a52acca8e82854656cc
-
SSDEEP
24576:G4lavt0LkLL9IMixoEiUdtRsu9lb0DX0DkOou268noAgCl3KF4LnPoY:Rkwkn9IM1UdtRl0DX0DkOjz8o1ww4E
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Acrobat.Pro.2023.x64.exe
Files
-
Acrobat.Pro.2023.x64.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 966KB - Virtual size: 966KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ