Static task
static1
Behavioral task
behavioral1
Sample
42d072facbcd6351c3124fb47265f9c8ff68564857f3ea17b8d67def5fd81446.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
42d072facbcd6351c3124fb47265f9c8ff68564857f3ea17b8d67def5fd81446.exe
Resource
win10v2004-20240226-en
General
-
Target
42d072facbcd6351c3124fb47265f9c8ff68564857f3ea17b8d67def5fd81446.exe
-
Size
1.1MB
-
MD5
a7de147b3f480b4fdfb0635384083468
-
SHA1
d9bf34f8ae35f7736e1b2b263f9cec1947f0f081
-
SHA256
42d072facbcd6351c3124fb47265f9c8ff68564857f3ea17b8d67def5fd81446
-
SHA512
bf940213d5eff721815ca983715b317af0d4c66ee37baa290b1b0ca58547d024daf23a58d4fd1ccc5afaac3eece94856ea2dfaac408a5cce90df69e941a12e36
-
SSDEEP
24576:VAHnh+eWsN3skA4RV1Hom2KXcmtc04fFpmbq8lWIXTnUG5:Eh+ZkldoPKsacDdpJtI
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42d072facbcd6351c3124fb47265f9c8ff68564857f3ea17b8d67def5fd81446.exe
Files
-
42d072facbcd6351c3124fb47265f9c8ff68564857f3ea17b8d67def5fd81446.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 354KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ