2a5df4838d32011da587409ed771984d1e9a0fc1741a8a57be7e76bc36593886 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a5df4838d32011da587409ed771984d1e9a0fc1741a8a57be7e76bc36593886
Size

1.2MB
MD5

a72240af09a7901068e7fed826236939
SHA1

167c9a52bd8e78719e252b95020fa6c76ba8104f
SHA256

2a5df4838d32011da587409ed771984d1e9a0fc1741a8a57be7e76bc36593886
SHA512

6890c55a8bdabab7e0933999f55a69a0fa4a6d2e014921ebd48182ddfb123f938ecfbff2e17fec11690d67bf090bfafca36517ec2c7c4f68c18b0c20d77fc5e3
SSDEEP

24576:RJeJfAqkjp98zHpie9Xpa8YHDsj1YEcyc:feJfAJGpLBpajHDe1Pc

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

2a5df4838d32011da587409ed771984d1e9a0fc1741a8a57be7e76bc36593886
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lif
Size: 24KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE