d45e0f25f9d3b2a1ecd36277ff377c3ead0dc34aeaaf2a7a3e77b9c1ca9e7cf0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d45e0f25f9d3b2a1ecd36277ff377c3ead0dc34aeaaf2a7a3e77b9c1ca9e7cf0
Size

1.2MB
MD5

68e011ba40bc4a33f5bd7bd9049f667e
SHA1

7b3de5894e69e29a3fd3cf4e39b17c31d268f205
SHA256

d45e0f25f9d3b2a1ecd36277ff377c3ead0dc34aeaaf2a7a3e77b9c1ca9e7cf0
SHA512

0b413ae3936fe6534db8f9750b00b7aec6e7923c0f41fa4886d9ffb0a47a2ee2663d07b258326d3b19943ba6993a9171e234693fb91f9420f9c5996d0a2dabde
SSDEEP

24576:9JeJfAqkjp98zHpieTXqDsj1dE1BcJ9nPx/igr7:7eJfAJGpLrqDe1W1snP8g

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

d45e0f25f9d3b2a1ecd36277ff377c3ead0dc34aeaaf2a7a3e77b9c1ca9e7cf0
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 689KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uaqfgsh
Size: - Virtual size: 84KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE