30cffc54af6a6a0c8b7ed717a2a7200d247ca63bc566d406f0b3ea6fb62b5b16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30cffc54af6a6a0c8b7ed717a2a7200d247ca63bc566d406f0b3ea6fb62b5b16
Size

1.2MB
MD5

702057992ad4380260c51ae8bdd209db
SHA1

4b203860eab5d1e93692fd5b15b3f43610556d19
SHA256

30cffc54af6a6a0c8b7ed717a2a7200d247ca63bc566d406f0b3ea6fb62b5b16
SHA512

a53dd9ca514ed80ed126703ed57aeffaf537d1c2da3074a64e2716fb593dc88bc5834dc859dc35400d062dd977e1e32b3f830612f5c8e4a4d0a3603b41ab1e70
SSDEEP

6144:ppqoa8aLiC/2OLu/rD/m/gkNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnP:ppqiC/2OYICP4cejGSOpRK3CnIiyr

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

30cffc54af6a6a0c8b7ed717a2a7200d247ca63bc566d406f0b3ea6fb62b5b16
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1rdata
Size: 271KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jbkkmvy
Size: 73KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE