Static task
static1
Behavioral task
behavioral1
Sample
7f8bb8901ac2cd42c191b43dc859d256628e6419a418feed9bf44210b1e4c207.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7f8bb8901ac2cd42c191b43dc859d256628e6419a418feed9bf44210b1e4c207.exe
Resource
win10v2004-20240226-en
General
-
Target
7f8bb8901ac2cd42c191b43dc859d256628e6419a418feed9bf44210b1e4c207.exe
-
Size
1016KB
-
MD5
17cb12c80860d0e11a15fb39cc3937e3
-
SHA1
6d16ea0f4692b5dace10cfb3e732b1b2e2100758
-
SHA256
7f8bb8901ac2cd42c191b43dc859d256628e6419a418feed9bf44210b1e4c207
-
SHA512
c8334f6c386f4f08a8cdd12344f1750d004fc63c388a7bc92189cc256d06e535fe13026c0f9c5f7a8c5d9721a2bd0e8af7ab411d8870237e80aeae66e15d0303
-
SSDEEP
24576:bAHnh+eWsN3skA4RV1Hom2KXcmtcXboWTZBhz:2h+ZkldoPKsacXTTZB
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f8bb8901ac2cd42c191b43dc859d256628e6419a418feed9bf44210b1e4c207.exe
Files
-
7f8bb8901ac2cd42c191b43dc859d256628e6419a418feed9bf44210b1e4c207.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ