1a4f8b991025ab9c81d44cd4ac80fc606b259d9ee4b3f5d35bb776652971520c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a4f8b991025ab9c81d44cd4ac80fc606b259d9ee4b3f5d35bb776652971520c
Size

720KB
MD5

652d13f74865c42264154f3c30fdbed8
SHA1

2602d9401a11c42edd46305cdac5dc57cad25aa5
SHA256

1a4f8b991025ab9c81d44cd4ac80fc606b259d9ee4b3f5d35bb776652971520c
SHA512

5b55ed7621ef188bdb1b0cd563028ee3d86f9f9b3b995b2ea1fe6a0ea50e813481ab0be1e074ab92b8d9dbcfff3014e2e0fa68bdc0ed26bb310a473bdf027627
SSDEEP

6144:VPNDXW8jOD/gSwgQM6/lkw3RRHxNjfOB8xOE5Sg8wGv2b2YL:7W77gSw7WwBZ/N

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

1a4f8b991025ab9c81d44cd4ac80fc606b259d9ee4b3f5d35bb776652971520c
.exe windows x86

206bfed36d2f5acde99bf22e88f8de8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord666
ord593
ord594
ord598
ord520
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord648
ord681
ord578
ord100
ord617
ord619
ord581

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ