Static task
static1
Behavioral task
behavioral1
Sample
7dd7e2dbc3dc6f7e16a93bd24853f7de.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7dd7e2dbc3dc6f7e16a93bd24853f7de.exe
Resource
win10v2004-20231222-en
General
-
Target
7dd7e2dbc3dc6f7e16a93bd24853f7de
-
Size
1.3MB
-
MD5
7dd7e2dbc3dc6f7e16a93bd24853f7de
-
SHA1
5404428bb0f1f21f5dc0717086e9c224aa7a8d45
-
SHA256
715c2f6284fc5eb65fea9c83af5509d6d543ffe4f944c9bc6a7895b143906900
-
SHA512
d1b6b4b7787fdaf01320daf816686dffae2241432b9f6049d480c2c5b4072ec6b223474287934382edfbd6af53f6984cb0d33ea3e0d0328c36adbd0d1efd9f43
-
SSDEEP
24576:VaHMv6CorjqnyC8VT9/khFZVJXV8h3E8ggS29j/v4BMdjoYnvi9:V1vqjdC8V+7ZV/23EKtj/wuKUvs
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dd7e2dbc3dc6f7e16a93bd24853f7de
Files
-
7dd7e2dbc3dc6f7e16a93bd24853f7de.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ