3ac545c97558d1f7546d15439ea13d977c9cc506e4cb5fe0319354f555b61aae | Triage

Sharing

General

Target

3ac545c97558d1f7546d15439ea13d977c9cc506e4cb5fe0319354f555b61aae
Size

748KB
MD5

65e6b5c367f4546add1a7c54846e5efd
SHA1

43e345007681222ff35f337db8e3e0d9b75b4a27
SHA256

3ac545c97558d1f7546d15439ea13d977c9cc506e4cb5fe0319354f555b61aae
SHA512

f2ba2b2211945c505d1f2f7958f621b03cb97df8f65d7b5fbd74ff8cf15cefd8153e984c3454fddb885898fff2b45553e241116d3d39906043c040a4542684ba
SSDEEP

12288:WpqiC/2OGAtkCP4cejGSOpRK3CGgo9kDv1sYzln:Wpo/2+ttPJLfpRK3CGghn

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

3ac545c97558d1f7546d15439ea13d977c9cc506e4cb5fe0319354f555b61aae
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE