Static task
static1
Behavioral task
behavioral1
Sample
1a21732d5599c0a01af3dd90caa83c69.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a21732d5599c0a01af3dd90caa83c69.exe
Resource
win10v2004-20231215-en
General
-
Target
1a21732d5599c0a01af3dd90caa83c69
-
Size
512KB
-
MD5
1a21732d5599c0a01af3dd90caa83c69
-
SHA1
ba573a8a770f8d7b9bfc67ae0c32c01f0cf51c68
-
SHA256
1bcfa627874f1930a7ae15b010c5a50e935c49e0d03df6e520b624b03a49ce95
-
SHA512
ce981ff370947697f9e66f685db372858436f8fa10b06534291a74bd0850db6d2dab5fc9aa684dc69afb03f0d6fad99b59ad65f1b29d7ccd64a204b523119c88
-
SSDEEP
6144:1VY0W0sVVZ/dkq5BCoFaJ2i5Lf24C07N5OvSLTUF6pQxI6Upe2cBnTu19bcodj66:1gDhdkq5BCoC5LfWSLTUQpr2Zu19Qm5F
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a21732d5599c0a01af3dd90caa83c69
Files
-
1a21732d5599c0a01af3dd90caa83c69.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 399KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ