Static task
static1
Behavioral task
behavioral1
Sample
9c2c1f027dd7033ac34c6244a299abb9f3c05394642d7fa48252a235d2d77d39.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9c2c1f027dd7033ac34c6244a299abb9f3c05394642d7fa48252a235d2d77d39.exe
Resource
win10v2004-20241007-en
General
-
Target
9c2c1f027dd7033ac34c6244a299abb9f3c05394642d7fa48252a235d2d77d39.exe
-
Size
1.3MB
-
MD5
2fe8c67377614330dda7914ef03d8212
-
SHA1
22b8a069bb1d173e24f385345706928eb6301390
-
SHA256
9c2c1f027dd7033ac34c6244a299abb9f3c05394642d7fa48252a235d2d77d39
-
SHA512
9b53a7df7309bc55d3db3d9bae0ee8469c5c012e5dda9953a0f9301bb2625aef6bae3d3bbe15d7ca99d2441cafd88ab3e5642ff8ca78ad29fa840da960986931
-
SSDEEP
24576:4RmJkcoQricOIQxiZY1WNYt8b4S9bYzTKMjoPUtpt:9JZoQrbTFZY1WNQ8b4SJ3MsPUtpt
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c2c1f027dd7033ac34c6244a299abb9f3c05394642d7fa48252a235d2d77d39.exe
Files
-
9c2c1f027dd7033ac34c6244a299abb9f3c05394642d7fa48252a235d2d77d39.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 514KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ