Behavioral task
behavioral1
Sample
AutoKS2.114/AutoKS2.114.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
AutoKS2.114/AutoKS2.114.exe
Resource
win10v2004-20231215-en
General
-
Target
880f449e1f34559ed5c0333e5cbacb86
-
Size
198KB
-
MD5
880f449e1f34559ed5c0333e5cbacb86
-
SHA1
17d072910f28c7dc5a714a2a89a73621e204b587
-
SHA256
d72efe6875a4a6ae8de2424c332e5bacb0f49f5dd488c0cc03a2a2c3bd842bc6
-
SHA512
9361be9dba92338397e952a24b0377b55771b776feb9c1e42396ea329fc3a17bdbf8715af1f17b525e07fbdd65a37b47a2443f7d1935c6a980d4363c980dc7c1
-
SSDEEP
6144:/pQ88fBz6ue8YsBKizZdeRuMm8EkmC6jwnvQQQ:/pQtN6uTY2KWLe0Mm8EkV45
Malware Config
Signatures
-
resource yara_rule static1/unpack001/AutoKS2.114/AutoKS2.114.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AutoKS2.114/AutoKS2.114.exe
Files
-
880f449e1f34559ed5c0333e5cbacb86.rar
-
AutoKS2.114/AutoKS2.114.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
AutoKS2.114/_AutoKey.ini