AutoClick[.]exe | Triage

Resubmissions

22-03-2024 17:46

240322-wcdldaed78 10

22-03-2024 13:04

240322-qaz4pseb4w 10

Sharing

General

Target

AutoClick.exe
Size

1.8MB
MD5

18082775ad95b33564a1129ecd3caf9a
SHA1

2197f396533b532e044eb271c333985da1fd3675
SHA256

9651a812e057af1920b6700e3ef0c6b6bc147c65be3546d9ab0900dedd0be1b6
SHA512

8bfc97d454aa11aacef3bb14e24bb0fb5df0f86cc7ba24241571b708d54dd50a31578ae008c1fa20fd0a868f039e84599aaf06a19d4959e223972bc9952cc6a5
SSDEEP

49152:37Ckt5baqAC/8yfMSpvoY+b5MreCb9Eb36Sn:3X5balCTDAYPXbCz6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

AutoClick.exe

Files

AutoClick.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ