8a90c6f5fd73748c480393a17d29c38cdff2ae0308337167e543255eb24fc286 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a90c6f5fd73748c480393a17d29c38cdff2ae0308337167e543255eb24fc286
Size

875KB
MD5

74d69c1b7bc024d22e2cf2a468bc09c7
SHA1

38a9b50f9a324edd9d68bf8795b6bf6daeb3d4e3
SHA256

8a90c6f5fd73748c480393a17d29c38cdff2ae0308337167e543255eb24fc286
SHA512

09160eb6d3a55311c6798df5e2567b3f1ed1a10ac2d9a94046d021ae08618401abc5d0755e645357cadd5aa145cefce900e72d00872eb8b11b6043ff6d429923
SSDEEP

12288:HpqXC/2OGAtkCP4cejGSOpRK3CGYoSr6oT:Hp5/2+ttPJLfpRK3CGYB+oT

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

8a90c6f5fd73748c480393a17d29c38cdff2ae0308337167e543255eb24fc286
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE