e3e874fbf8476be799b3bc140cf0da4be718f2860d48088ad678a960e75c9de7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3e874fbf8476be799b3bc140cf0da4be718f2860d48088ad678a960e75c9de7
Size

1.2MB
MD5

65e1cbfedf103f0416960696228bad64
SHA1

ab29ff22f0c4d1579fa39ee34c485f2849578b3e
SHA256

e3e874fbf8476be799b3bc140cf0da4be718f2860d48088ad678a960e75c9de7
SHA512

233bacece974713fa016e6a45b23fdc0edc346aa827ee950f21d9757b87b3e8957eae2ff4da47636c3b81d549605c73cf3e4fda831ad6f7b6ddfd7bf4d001a7e
SSDEEP

12288:QJeJfEuGstgg/kjp98zHpiX5to0X0vBSXyMzBUWb9lx/44zkr:QJeJfAqkjp98zHpiXToy0BcJ9nPx/xkr

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

e3e874fbf8476be799b3bc140cf0da4be718f2860d48088ad678a960e75c9de7
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE