23e677892946b5979cef71b7211c1b8592c8838d4eb54b001acb6fd697f9c4a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23e677892946b5979cef71b7211c1b8592c8838d4eb54b001acb6fd697f9c4a2
Size

581KB
MD5

66be1fbe8a4999d57827a62c54ce5950
SHA1

e9e6898981c652009904bf72f0b70a17a134d212
SHA256

23e677892946b5979cef71b7211c1b8592c8838d4eb54b001acb6fd697f9c4a2
SHA512

394fa5c0238595070a6b887b946f788c2a6014df7c60bdddde151c9c0f014747f146bbb4e9deb7df69e989b805cfbf79932210d56746ab100f2018729785db2c
SSDEEP

12288:KgFhdkq5BCoe5LfWSLTCQpf26619QmkDy5kfjKT:KgFhdkMRafLTCW2661umkDsU2T

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

23e677892946b5979cef71b7211c1b8592c8838d4eb54b001acb6fd697f9c4a2
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 399KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE