Static task
static1
Behavioral task
behavioral1
Sample
505d33dbc501d1bee004c997334a8032.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
505d33dbc501d1bee004c997334a8032.exe
Resource
win10v2004-20231215-en
General
-
Target
505d33dbc501d1bee004c997334a8032
-
Size
1.1MB
-
MD5
505d33dbc501d1bee004c997334a8032
-
SHA1
e0a3502d56d88c82f568fc192a854d581e794969
-
SHA256
4503e15635dccea539e776eefbc4f4a115c13b68b89234d604cba1f3832f02e2
-
SHA512
148fc36f575a6e009f6860d01a64d6df84ea587428f99ba9f40b3886e2004ab18c448458649d929dee709b090c679a3e8e09c74fc4f73ddc3e43f7f06e4e637c
-
SSDEEP
24576:ppo/2+ttPJLfpRK3Chn6FknYo5VuDpEhzvizGwIwnHDZ:Ye2PJLa3Chn6anYoTs+D6GwIwHDZ
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 505d33dbc501d1bee004c997334a8032
Files
-
505d33dbc501d1bee004c997334a8032.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 495KB - Virtual size: 495KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ