Static task
static1
Behavioral task
behavioral1
Sample
811e59085cb487f0a0f3804b6fb051209d09f31485c6261511c76ae1aef140c9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
811e59085cb487f0a0f3804b6fb051209d09f31485c6261511c76ae1aef140c9.exe
Resource
win10v2004-20231222-en
General
-
Target
811e59085cb487f0a0f3804b6fb051209d09f31485c6261511c76ae1aef140c9.exe
-
Size
1.5MB
-
MD5
4b3b54005bd3b336719756523a4a8a09
-
SHA1
8c55e751b64793ca5746ec4324d7887eb252f4fd
-
SHA256
b1745fd146da4a50c0beb3f1e2bb1d2d096bd0fe923f2db136cbb1793a5fa2cd
-
SHA512
b6fe5acc8ecd99c4fd2f733c2d38d585f249b9d4dd2c4956b77829f316c7711fe9e474f38228d567863e9d10783fd7d7db6c56dba405bdb49f2d8c92f50a06a0
-
SSDEEP
24576:b4lavt0LkLL9IMixoEiUd4MmOReGh1kLbkZEFK0gmJBphnYf0sM:ukwkn9IM1Ud4oek1kH2EFK0gsBDf
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 811e59085cb487f0a0f3804b6fb051209d09f31485c6261511c76ae1aef140c9.exe
Files
-
811e59085cb487f0a0f3804b6fb051209d09f31485c6261511c76ae1aef140c9.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 697KB - Virtual size: 697KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ