SecuriteInfo[.]com[.]W32[.]AIDetect[.]malware2[.]22824[.]10658[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.AIDetect.malware2.22824.10658.exe
Size

1.2MB
MD5

ce03d67d2b0b10df7c7c8e0ff0756c36
SHA1

a55e827aa4824a91fa30ee90e74ec5f2ac099166
SHA256

7020110324d7bf9a6b87ff7e87dac4a039dc38dd81ab29b128aa92efeaf51c87
SHA512

33914a53b62af7ae72f296be72ef93f831ddd5bfa27915b85993f9ffaac00db6e57f3586085252ca0e7bb7ed3b7bf4ae1cd0fbfb7cfc7ca66fa44bf698c0db0c
SSDEEP

12288:co3WppP+GvQE35vE99HkfNULsAYh7IO17SPXjHz5:co3WnvQMNUQIO17wB

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

SecuriteInfo.com.W32.AIDetect.malware2.22824.10658.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ