Static task
static1
Behavioral task
behavioral1
Sample
51d1cd7aecef7d75492c7050f16d311b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51d1cd7aecef7d75492c7050f16d311b.exe
Resource
win10v2004-20231215-en
General
-
Target
51d1cd7aecef7d75492c7050f16d311b
-
Size
997KB
-
MD5
51d1cd7aecef7d75492c7050f16d311b
-
SHA1
d28f09985c45784efad713ba62cd3a287d5c8ad3
-
SHA256
c03a25eca129a399ae8474d0242eb80e161fd94d81f6c93b0f6727eaa1f821d9
-
SHA512
d31a646315d0e8dc7a4e5731be268be31a4ac89dcb7d18e0cc8f67d2beb0c4828758881c15279f90661199d1408aea9d6cf46502dbb4ba4b9946f024a37b2aa7
-
SSDEEP
12288:caWzgMg7v3qnCiMErQohh0F4CCJ8lnyC8mmsTpwbOtPY+ZPzHp1WIW+ZPzHp1WII:jaHMv6CorjqnyC8WyQrrHprHM
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51d1cd7aecef7d75492c7050f16d311b
Files
-
51d1cd7aecef7d75492c7050f16d311b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ