e9a63b4e0802b10771938ae12eff4fb445e36f885451d675b56d36d222cf296b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9a63b4e0802b10771938ae12eff4fb445e36f885451d675b56d36d222cf296b
Size

1007KB
MD5

668e6ff57dcbd4ead861eb025d175491
SHA1

ad4e708f66d1b86740625d3e5a8324bdb057f612
SHA256

e9a63b4e0802b10771938ae12eff4fb445e36f885451d675b56d36d222cf296b
SHA512

0c40b029f6e26a1f5031a55e95a487556275d71b22d8accec815563249a188f2a0db14f743180a8d7c20885a9e3dd511b9576781b3e4b03fdb6f9784604b9508
SSDEEP

6144:+pqoa8aLwC/2OLu/rD/m/gkNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnz:+pqwC/2OYICP4cejGSOpRK3CnIiOMs

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

e9a63b4e0802b10771938ae12eff4fb445e36f885451d675b56d36d222cf296b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1rdata
Size: 251KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wttwwvs
Size: 104KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mbzkstk
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ptqwdwb
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE