1dacb7eeb34fff605ba9d6b2c69797839fbf39dc4b675a12bb608a4d04135ae8 | Triage

Sharing

General

Target

1dacb7eeb34fff605ba9d6b2c69797839fbf39dc4b675a12bb608a4d04135ae8
Size

1.1MB
MD5

08e6b6acc62fa1b48b79fdb5f6c741a4
SHA1

14d0ee24fa377cab81cde64295aa2dfe099a8fd5
SHA256

1dacb7eeb34fff605ba9d6b2c69797839fbf39dc4b675a12bb608a4d04135ae8
SHA512

b6a65253815d712faaff93d8dad1001918cd646ee322b860d0777e4fe722a9df2db531ffd6ccb3cca65d293e316c0e030c53c9f841b856c7bfccb00c3ad490fb
SSDEEP

24576:+tb20pkaCqT5TBWgNjVYHHBT+v3LeMFo6:rVg5tjVYHHBT+vF

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

1dacb7eeb34fff605ba9d6b2c69797839fbf39dc4b675a12bb608a4d04135ae8
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ