Static task
static1
Behavioral task
behavioral1
Sample
f700fd10a9f73ed24cdc1caa8358d658e4d4299012a35364abd5ba6063e85809.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
f700fd10a9f73ed24cdc1caa8358d658e4d4299012a35364abd5ba6063e85809.exe
Resource
win10v2004-20240226-en
General
-
Target
f700fd10a9f73ed24cdc1caa8358d658e4d4299012a35364abd5ba6063e85809.exe
-
Size
1.2MB
-
MD5
8d31c3352e07f3412716f8c96d5c6f27
-
SHA1
22d580d9ab2942d7485d0cd0256c46f34f5e79fd
-
SHA256
f700fd10a9f73ed24cdc1caa8358d658e4d4299012a35364abd5ba6063e85809
-
SHA512
202e2cc11298d0fa2f478bc1eacd03b8432e0e5a72bf4e82eb56647c90dd2be182b64086820813aef79084a6886d5cbb230c55481974441aa556c527378065cc
-
SSDEEP
24576:TAHnh+eWsN3skA4RV1Hom2KXcmtc+40tquqiapmNwZKedQKG:eh+ZkldoPKsacJkqTi8uCKeu
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f700fd10a9f73ed24cdc1caa8358d658e4d4299012a35364abd5ba6063e85809.exe
Files
-
f700fd10a9f73ed24cdc1caa8358d658e4d4299012a35364abd5ba6063e85809.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 413KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ