Static task
static1
Behavioral task
behavioral1
Sample
b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e.exe
Resource
win10v2004-20240226-en
General
-
Target
b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e.exe
-
Size
1.0MB
-
MD5
a402a1b2187e025f4e8f791fb302a1e5
-
SHA1
eab8402c4c752684e5bf5f3eb6ce21ac2f8fcc74
-
SHA256
b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e
-
SHA512
bfcc79ba4a44c1e0371665f8102aae611062fc65d48b3dc1a206eb80518958ac6684fe80d6713bc40b0a942668ec6c3a76459a2d79a0aa0d191a8d13089b3843
-
SSDEEP
24576:6AHnh+eWsN3skA4RV1Hom2KXcmtcM4wkExDla+:Nh+ZkldoPKsacLwlx
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e.exe
Files
-
b0195ba69b400a134c86bc120c2dcc9aee2390d6ad7928603462480d4eb1d76e.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 225KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ