Static task
static1
Behavioral task
behavioral1
Sample
70896b7d845bd473d2089dd1868d2615.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70896b7d845bd473d2089dd1868d2615.exe
Resource
win10v2004-20231215-en
General
-
Target
70896b7d845bd473d2089dd1868d2615
-
Size
512KB
-
MD5
70896b7d845bd473d2089dd1868d2615
-
SHA1
645c3633d4189afafa873c5b7aa548d02216960e
-
SHA256
d4602aa02729e1d036f882584afb6688d6e7a37132f90a6ab4584cfcb05e3627
-
SHA512
425d1bd238d04a2b4ea7dcfad686bb9c867d45597d8e472e5f7804c21d081e15ac4c9bcec6181557f8218b5a21b2c5c28b8e95cbf7b530dd51c6e094d3e2f036
-
SSDEEP
6144:1VY0W0sVVZ/dkq5BCoFaJ2i5Lf24C07N5OvSLTUF6pQxI6Upe2cBnTu19bcodj6N:1gDhdkq5BCoC5LfWSLTUQpr2Zu19Qm5M
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70896b7d845bd473d2089dd1868d2615
Files
-
70896b7d845bd473d2089dd1868d2615.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 399KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ