56db5d051a87a69a546032cfb187628fc5410946e4a446d517dd664d903c1a93 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56db5d051a87a69a546032cfb187628fc5410946e4a446d517dd664d903c1a93
Size

668KB
MD5

6638f164a6f6899e9b3aa050c7f46d10
SHA1

26176e0490629c3244733652fa12e3f9bea40a76
SHA256

56db5d051a87a69a546032cfb187628fc5410946e4a446d517dd664d903c1a93
SHA512

7ac7bd05f52de5104235c405013aed0f2172b2de32ed5406856b4be59a6eff2a713cf773482d4a7fdb3a294d7f63407b2b06c2f2c73df07d95e686a37c9c8acd
SSDEEP

6144:5pqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCH:5pqiC/2OGAtkCP4cejGSOpRK3CnIi

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

56db5d051a87a69a546032cfb187628fc5410946e4a446d517dd664d903c1a93
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE