Static task
static1
Behavioral task
behavioral1
Sample
894cccc6062828bd1da8c963ffac44668d013feebf2dcac3230b139bd3b1a9f4.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
894cccc6062828bd1da8c963ffac44668d013feebf2dcac3230b139bd3b1a9f4.exe
Resource
win10v2004-20240426-en
General
-
Target
894cccc6062828bd1da8c963ffac44668d013feebf2dcac3230b139bd3b1a9f4.exe
-
Size
1.1MB
-
MD5
9716f7b69abdbedc235352468f5c4012
-
SHA1
56a5d07158deb7c5c10b96b2d6e1b581bd056ced
-
SHA256
894cccc6062828bd1da8c963ffac44668d013feebf2dcac3230b139bd3b1a9f4
-
SHA512
27ece55347834003a29bb0d7dc94e2a0d8e346d7a24cc45124ea5ba7fee8b789d764cbfa7207a2797b4ec5889ffc664a5005514d30ea60a931f9d2845fe1724c
-
SSDEEP
24576:pAHnh+eWsN3skA4RV1Hom2KXcmtcM9u9Bij/R4F1:wh+ZkldoPKsacM09Y94
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 894cccc6062828bd1da8c963ffac44668d013feebf2dcac3230b139bd3b1a9f4.exe
Files
-
894cccc6062828bd1da8c963ffac44668d013feebf2dcac3230b139bd3b1a9f4.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ