286a2cdceeb401d0d04e451d1c29320e72a04ba32f50cdf617c61abe9549d62d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

286a2cdceeb401d0d04e451d1c29320e72a04ba32f50cdf617c61abe9549d62d
Size

1.2MB
MD5

787f01363a31c81b44850c2348b80d33
SHA1

137d8838e86f56f2ea233055acf85efb2a0abf09
SHA256

286a2cdceeb401d0d04e451d1c29320e72a04ba32f50cdf617c61abe9549d62d
SHA512

6c9417bf330f57d3f05cfa86cf6f88a8e5914b0228f8c6c3d844d3d6bf43bd3220d89150320f6fb5e84bc01a8aae2ee5ab94c50bbaac4aa8ea027798702b0ea1
SSDEEP

24576:QJeJfAqkjp98zHpieTXpa8YHDsj1YEcyc:ieJfAJGpLrpajHDe1Pc

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

286a2cdceeb401d0d04e451d1c29320e72a04ba32f50cdf617c61abe9549d62d
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lif
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE