a957c31a7391103567627627207c7b57a90362f9c7a8b23f2858dcf2e0b706c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a957c31a7391103567627627207c7b57a90362f9c7a8b23f2858dcf2e0b706c0
Size

15.8MB
MD5

909297322bdb723875ac2d9f7491b6f4
SHA1

8592f062e72b425ff3cf0fb4b41f398d838a5062
SHA256

a957c31a7391103567627627207c7b57a90362f9c7a8b23f2858dcf2e0b706c0
SHA512

cca6e46989805fc7695bb0e42a227f5f70e1c320a616c1a4a4e32bcbc5092d6350316bbc672a6427f932c2b1a18728bc04c99062df4dfa80476bb5fbcbc26256
SSDEEP

98304:EeVAJUX12zHl+k4NmP4yGZeQxtRsbAFk5nTNUdmNgWj45kMTvcNzPHwhqpwom762:EfUX1yNWmP4yGZeX5TNugoIPHwL9

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

a957c31a7391103567627627207c7b57a90362f9c7a8b23f2858dcf2e0b706c0
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE