Static task
static1
Behavioral task
behavioral1
Sample
1eb9eea740e4165eb9ae5dcee0d72862.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1eb9eea740e4165eb9ae5dcee0d72862.exe
Resource
win10v2004-20231215-en
General
-
Target
1eb9eea740e4165eb9ae5dcee0d72862
-
Size
1.2MB
-
MD5
1eb9eea740e4165eb9ae5dcee0d72862
-
SHA1
28dae67732b6584ef476b4c2900c40680cedacf6
-
SHA256
38f9dc7d43224d245fa5c1405fb3f624e2659f28655a59fc5737973b84cc282f
-
SHA512
f06301398fdf04fc4a6dad837373ed421343570e87a1080c76545f62409ee5ac4efca60ec4585317a82f0def8f6a8d238985e9dbad37a336667f1d2b53b6cb6b
-
SSDEEP
24576:SAQoDefT6HesrQrSDZhyZ+aan+mMfqZaRfAuYLNH9pRBFZIlPed9775:SAcGHC2ZUZ+umWea+NPpRB/Iped977
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1eb9eea740e4165eb9ae5dcee0d72862
Files
-
1eb9eea740e4165eb9ae5dcee0d72862.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ