b22dd20d71f9f1dfec7e2662ffda332cd03060ec3297612f91fe5cbd207f8d0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b22dd20d71f9f1dfec7e2662ffda332cd03060ec3297612f91fe5cbd207f8d0c
Size

1002KB
MD5

041957160a079e4df2e04689a977f01b
SHA1

c23071be0453506e5416338b927d0d70522d728c
SHA256

b22dd20d71f9f1dfec7e2662ffda332cd03060ec3297612f91fe5cbd207f8d0c
SHA512

ae420300ae61862243cd19fea206ac12e88f36562c440371f23deb6cb59463fc40b5affc3c1224f1b72c74e7603d86c15062a6a4bd9188cc54913dc5c552eba0
SSDEEP

12288:GpqiC/2OGAtkCP4cejGSOpRK3Cn/igJ03ho:Gpo/2+ttPJLfpRK3Cnqfho

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

b22dd20d71f9f1dfec7e2662ffda332cd03060ec3297612f91fe5cbd207f8d0c
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 202KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE