Static task
static1
Behavioral task
behavioral1
Sample
24ff63cc271a4868cd0fa0b13f729c8c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
24ff63cc271a4868cd0fa0b13f729c8c.exe
Resource
win10v2004-20231215-en
General
-
Target
24ff63cc271a4868cd0fa0b13f729c8c
-
Size
512KB
-
MD5
24ff63cc271a4868cd0fa0b13f729c8c
-
SHA1
aeb5188f56a4db89fd591f7fbb8a8204e9e1374b
-
SHA256
87493784b02b98118e59fc2c95f19a4b07970b02f9433a3fffa2164bcdbe4b66
-
SHA512
9d81732112b422cd528898f63a4a9f60e684e23f07cc8f9b860573cc6e1e633c584e6291fca36f7965e4a256d80fc814d7b62ef55cf9da1935639ab78f417c85
-
SSDEEP
6144:1VY0W0sVVZ/dkq5BCoFaJ2i5Lf24C07N5OvSLTUF6pQxI6Upe2cBnTu19bcodj6x:1gDhdkq5BCoC5LfWSLTUQpr2Zu19Qm5q
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24ff63cc271a4868cd0fa0b13f729c8c
Files
-
24ff63cc271a4868cd0fa0b13f729c8c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 399KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ