19c4dfef93a1fb7f77a3a88d6866983e81e3941ce42b66fdd48e3b4a4d85c3b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19c4dfef93a1fb7f77a3a88d6866983e81e3941ce42b66fdd48e3b4a4d85c3b2
Size

792KB
MD5

6d116a4190cce5b875b6fe26c5aba0ee
SHA1

2dcdb61e9aa96121d913e8ac44fac6f6d896d03a
SHA256

19c4dfef93a1fb7f77a3a88d6866983e81e3941ce42b66fdd48e3b4a4d85c3b2
SHA512

2d045e073cfdb878bf541e4f1d38a22961df22948e8c2ef3bcdb3d5b46c9b88320499c2e608992f67fe30fc4ac26773232c3faba7e13f53f474ea93a269432e2
SSDEEP

6144:npqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebgjSP2pjNhcAYnC8:npqiC/2OGAtkCP4cejeSOpRK3CHIi/k

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

19c4dfef93a1fb7f77a3a88d6866983e81e3941ce42b66fdd48e3b4a4d85c3b2
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srdata
Size: 110KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wvkvdar
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

frwjwlz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE