ad315928dd13682fd2c55a4a4028ff281825866593691dd66b9437db532317fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad315928dd13682fd2c55a4a4028ff281825866593691dd66b9437db532317fb
Size

847KB
MD5

58ed83f13d2dbeab9508bedf9282c61d
SHA1

df9166507a450a61c6b176c04de8e3bd92546428
SHA256

ad315928dd13682fd2c55a4a4028ff281825866593691dd66b9437db532317fb
SHA512

1b39ad4ba85e45b6a9eca939afdd417f5731bd23b6f90ec6ef5d9bbbb704a9c0cffa2281164f495caffd48b1dc920d630465a24a39142b0fb6183fa8694eb867
SSDEEP

6144:Zpqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCc:ZpqiC/2OGAtkCP4cejGSOpRK3Cn+id

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

ad315928dd13682fd2c55a4a4028ff281825866593691dd66b9437db532317fb
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

._rdata
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qnk
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE