Static task
static1
Behavioral task
behavioral1
Sample
03b6a5873983aae7c22fcfaff2df4b40N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03b6a5873983aae7c22fcfaff2df4b40N.exe
Resource
win10v2004-20240802-en
General
-
Target
03b6a5873983aae7c22fcfaff2df4b40N
-
Size
541KB
-
MD5
03b6a5873983aae7c22fcfaff2df4b40
-
SHA1
a2f6aaa15d814165ea069c43bce7b0c359f752c2
-
SHA256
ba7a3ef401b8ad4da05d76ea6075d6aaf7bdecc3daf684b25204f0ab27529d41
-
SHA512
1fe7a18c0799fc49ca3b058505e7d11469741a8ee72a5e735f9519c5150677902d92db7be66d171ad02a9cd64ed0654e53f8278d4113d6322d690be9ad81ffb9
-
SSDEEP
12288:j6SKqT31T6WpJY6V765jKqostkm3Nbi7IMeyt:WxqT31T6WE6I5jKqosOm9bWPeyt
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03b6a5873983aae7c22fcfaff2df4b40N
Files
-
03b6a5873983aae7c22fcfaff2df4b40N.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ