eaea9450c29561a6bf0a6b30b46abf1133774576507036c0c0c42cf3079d1b26 | Triage

Sharing

General

Target

eaea9450c29561a6bf0a6b30b46abf1133774576507036c0c0c42cf3079d1b26
Size

821KB
MD5

7777f59251f5792f30c4f139fb3cf960
SHA1

1a955ca910227e83cc32f9deca0a8c67e142a5d9
SHA256

eaea9450c29561a6bf0a6b30b46abf1133774576507036c0c0c42cf3079d1b26
SHA512

d89f5aead5872c9483cd3101ca2222b73b9bb36ac3bf8802a0e6ed9bfad6ffbc7f3da11e3d29783d20170933efe1dc95e4ecf33ddd60d174204a7a5027e66af6
SSDEEP

12288:5aWzgMg7v3qnCiMErQohh0F4CCJ8lnybQLKLQ8hoHJXuRk:YaHMv6CorjqnybQLjSopXb

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

eaea9450c29561a6bf0a6b30b46abf1133774576507036c0c0c42cf3079d1b26
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE