Static task
static1
Behavioral task
behavioral1
Sample
d1ac5940fda3b6142dea4520bfefe9cc46ba8dac54f394bc84fe5afc25e66127.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d1ac5940fda3b6142dea4520bfefe9cc46ba8dac54f394bc84fe5afc25e66127.exe
Resource
win10v2004-20231222-en
General
-
Target
d1ac5940fda3b6142dea4520bfefe9cc46ba8dac54f394bc84fe5afc25e66127.exe
-
Size
1.5MB
-
MD5
bda56abeb37cad714b564b250760af18
-
SHA1
6fbdd2a8d445c6c474f2dd0f351c54590a8ef3b4
-
SHA256
98c3ed717d17c3abe2c4140051a5c75913409e096c1f7a1f4546579c3845b992
-
SHA512
2d9082e7498111e0b884f8f4f0b6debf49e0ab0e4a21c5b397b741af313f5e2e4b3d2899a8398fb239364aed6c3be0741a286af358030e2d172585991ccd17c5
-
SSDEEP
24576:A4lavt0LkLL9IMixoEiUdPjQUu/ZFyX0DkOou268noAgCl3KF4LnPoB:3kwkn9IM1UdgZFyX0DkOjz8o1ww4E
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1ac5940fda3b6142dea4520bfefe9cc46ba8dac54f394bc84fe5afc25e66127.exe
Files
-
d1ac5940fda3b6142dea4520bfefe9cc46ba8dac54f394bc84fe5afc25e66127.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 765KB - Virtual size: 765KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ