General
-
Target
AutoHotkey_2.0.14_setup.exe
-
Size
2.9MB
-
MD5
661ffe1f5d108bd989d3088c83c8e346
-
SHA1
4658e138d5f67020c60e7502c37c951e07d8bfc0
-
SHA256
20d41f5fcfa4f3d61c533a9e21a019f0bca0bd8012a6528ccdf2621749a122ab
-
SHA512
e64aff0a072f01f3782a6f94f5afab4796db36b2bbfa2654796fdd8dd3cc98bccf55091cff5a212ed1c6b79ad6a90788f22a2808bf7df72095a03a9bc07ca265
-
SSDEEP
49152:i2fxI7bWaEHI9ZlVh17MvhuMh1ufS5wO6YNltaZv3+YiFK7EvQMJ4QCnJV:9ZI7YIzlVh1wnjgS5wOPDXdw7EZwV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AutoHotkey_2.0.14_setup.exe
Files
-
AutoHotkey_2.0.14_setup.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE