Static task
static1
Behavioral task
behavioral1
Sample
b70b6d8c12d026a0d1099ac29958ea528e36c1ab5c084bc281ce78946353c265.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b70b6d8c12d026a0d1099ac29958ea528e36c1ab5c084bc281ce78946353c265.exe
Resource
win10v2004-20231215-en
General
-
Target
b70b6d8c12d026a0d1099ac29958ea528e36c1ab5c084bc281ce78946353c265
-
Size
7.8MB
-
MD5
ab6dbd3aed690848c6ae1dfea653ee2a
-
SHA1
afed60404370488cdea0725ce922d6b5f9531794
-
SHA256
b70b6d8c12d026a0d1099ac29958ea528e36c1ab5c084bc281ce78946353c265
-
SHA512
0554f53ea87b7833fa0fba14f74362ac0044796a94c5ce4f5c293c0510e543943e22d75caf5d539eb6c7ad068d24764ff9f45ef12dd4009a3c0baaf1402731e4
-
SSDEEP
196608:k5lCB20e0JKkT2zT2Y/h6VzSYT689n5X0v5D4Ymg5kW2/3AJZykibt3MsGTrFfsD:c1mgbhs3T68x5EF/GW20gzb/GTrP8
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b70b6d8c12d026a0d1099ac29958ea528e36c1ab5c084bc281ce78946353c265
Files
-
b70b6d8c12d026a0d1099ac29958ea528e36c1ab5c084bc281ce78946353c265.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 159KB - Virtual size: 7.2MB
Size: 7.8MB - Virtual size: 64KB
��@�� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
Size: 7.8MB - Virtual size:
Size: 658KB - Virtual size:
IMAGE_SCN_CNT_CODE