0691127379fa0524793f31eea2ecec76b96d300da72f5da0aeae4caf2f322858 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0691127379fa0524793f31eea2ecec76b96d300da72f5da0aeae4caf2f322858
Size

818KB
MD5

65c1993989ae39b8a635a3a70305e780
SHA1

60dfbd6bbeef9d9848f7b1b344320d76abf01b1f
SHA256

0691127379fa0524793f31eea2ecec76b96d300da72f5da0aeae4caf2f322858
SHA512

4ca5455d8d0fe87b71311d961d35420fef17cce1310d414a180430d7a8c97f859a1b9ac2a6990257bcfcce02769f2848285fd5f15bb27a3152f0c868aaa95c9f
SSDEEP

6144:rpqoa8aLLC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCp:rpqLC/2OGAtkCP4cejGSOpRK3CnIi+M

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

0691127379fa0524793f31eea2ecec76b96d300da72f5da0aeae4caf2f322858
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1rdata
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

njlunhe
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE