General
-
Target
AutoHotkey_2.0.12_setup.exe
-
Size
2.9MB
-
MD5
2cdbe2b76a36b976e9980fb4733f1052
-
SHA1
64bbb4dbeed8639b272a73c2cad0f9155f42115d
-
SHA256
4e1e3123dd85d3ac65a0803b08dd89b9b12b5a00b9f566782855332d03e5fe26
-
SHA512
cec27f241f62d49c639cffdd7be4e56c49de3bdeabbdb7337b24a054361ae3412e72e48e182a7c18b76b611f605365cc02e4b0d1cdca201cb356e38b6fd78330
-
SSDEEP
49152:B9AaYh1cvoIPqovmRIsOuFEGTUFu1G1Vn/2SGR4mq08hc9pdgWaU6SjwryAA+iI3:f/YmoI5F/VG02pLq0JgHUyryAXiI5A5w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AutoHotkey_2.0.12_setup.exe
Files
-
AutoHotkey_2.0.12_setup.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE