Static task
static1
Behavioral task
behavioral1
Sample
8bee7b24dcd50461e9c801f48cf2d57713595ad7086c4e4726131120e3743059.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8bee7b24dcd50461e9c801f48cf2d57713595ad7086c4e4726131120e3743059.exe
Resource
win10v2004-20240611-en
General
-
Target
8bee7b24dcd50461e9c801f48cf2d57713595ad7086c4e4726131120e3743059
-
Size
1.1MB
-
MD5
34bb671b65cb03dde19c0b6d99fe4649
-
SHA1
0803e7064b1117ce2957503558dcd142013a6c46
-
SHA256
8bee7b24dcd50461e9c801f48cf2d57713595ad7086c4e4726131120e3743059
-
SHA512
a8057bf2aad678f8e9a8f1cf75a6d461f80b2839f8ccee70ffb00f75fa6180638d19dd3b5d1b87cb90f78bb88e651b1b850f3e7b7dde11c8ae1a9c90ef160139
-
SSDEEP
24576:VAHnh+eWsN3skA4RV1Hom2KXcmtcKLEnpE3dyB0vG:Eh+ZkldoPKsacK4+Ny
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bee7b24dcd50461e9c801f48cf2d57713595ad7086c4e4726131120e3743059
Files
-
8bee7b24dcd50461e9c801f48cf2d57713595ad7086c4e4726131120e3743059.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ