Behavioral task
behavioral1
Sample
AutoHotkey_2.0.16_setup.exe
Resource
win11-20240508-en
General
-
Target
AutoHotkey_2.0.16_setup.exe
-
Size
2.9MB
-
MD5
b6063d652f90f30802456ddae6b8bc5a
-
SHA1
276c50c8b92ccc41f39b4e4defae412ea3bd0dae
-
SHA256
f5d2887adeaa87f28d30174552b1ec976d302e7c804faa3e8ce74ddb0dda6c78
-
SHA512
d011ab0f7183afc925c8cd3b8ed44707aaeb599e7dbeb4d74f70cc228663f76df4078a8f69785ed2d196af7d6eccff259592475b055b3d87229b132166789b9d
-
SSDEEP
49152:wxIQN9rTFTOWbczZN50eVVxzBGFt8KEV1Np4GnpXZiBQlCQGebXR6kPg:+NzfbcWeDxl4t8KEpSGFZyssVk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AutoHotkey_2.0.16_setup.exe
Files
-
AutoHotkey_2.0.16_setup.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE