49514284ef086ca1e77fe0a8b4708a969ac73bfbbb8c5b88061f5a1e90a2f3bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49514284ef086ca1e77fe0a8b4708a969ac73bfbbb8c5b88061f5a1e90a2f3bf
Size

703KB
MD5

6014c637a2bffeebd66de921fe818650
SHA1

6d7391876f335710a637b7416978d25aae959c8f
SHA256

49514284ef086ca1e77fe0a8b4708a969ac73bfbbb8c5b88061f5a1e90a2f3bf
SHA512

4119e7042fac96f0ee1355a101f5202a713103fe0d38a471bc2ab21ed1cf92abb64b7a2614f4e03c6e03093838acd3a8906f5ec956f13d29656a19068108bf19
SSDEEP

6144:qpq2ma8aB6C/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnK:qp7x6C/2OGAtkCP4cejGSOpRK3CGY

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

49514284ef086ca1e77fe0a8b4708a969ac73bfbbb8c5b88061f5a1e90a2f3bf
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE