Static task
static1
Behavioral task
behavioral1
Sample
3e6f90e0bf98311af04aa05a90f9f2cc38ee7c1154f9d4a447849b7d6e6a9498.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e6f90e0bf98311af04aa05a90f9f2cc38ee7c1154f9d4a447849b7d6e6a9498.exe
Resource
win10v2004-20231222-en
General
-
Target
3e6f90e0bf98311af04aa05a90f9f2cc38ee7c1154f9d4a447849b7d6e6a9498.exe
-
Size
1.5MB
-
MD5
379c3e3198fcba8d22df23d058b09efc
-
SHA1
5e28848e958152f1c149407c3d3c71fbbaba1b95
-
SHA256
17ac6956090fa33e32c4d3fed7feda39a43a57605ee7f08c2479b7890638144e
-
SHA512
0790a3ad48d2110a46d06bdeda22d8626f94db5e89e98d6e05380a14411f01f1391476b71146b20ce0a0a4a2cf5fcac5b0147209a83e68904e747e3224aa94e9
-
SSDEEP
24576:94lavt0LkLL9IMixoEFNYl/AFVdEnltcW8PKx0N1Slb4yqXNy:Ukwkn9IMSNYe7EUW8s0N814yu
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e6f90e0bf98311af04aa05a90f9f2cc38ee7c1154f9d4a447849b7d6e6a9498.exe
Files
-
3e6f90e0bf98311af04aa05a90f9f2cc38ee7c1154f9d4a447849b7d6e6a9498.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 695KB - Virtual size: 695KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ