e9328a365df9a9922e7e08d12ed731933fd5e841aa87c1aba5cfa4303c21dfba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9328a365df9a9922e7e08d12ed731933fd5e841aa87c1aba5cfa4303c21dfba
Size

1.2MB
MD5

81dce1cf397bf5631d54aba1e9444a7f
SHA1

37aebcb25f3122c9704b6ac4805f0791bbe59b87
SHA256

e9328a365df9a9922e7e08d12ed731933fd5e841aa87c1aba5cfa4303c21dfba
SHA512

9b61dd0ea2041ed3b5dc8d65921fe99d8061f63366559cafe18e286e64e73a7fb49dfbde61481647770a2b69aa5b546b0a6a8541d524156b09ce285617ba742b
SSDEEP

24576:EJeJfAqkjp98zHpieTXqDsj1dE1BcJ9nPx/igrJ7X:meJfAJGpLrqDe1W1snP8UX

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

e9328a365df9a9922e7e08d12ed731933fd5e841aa87c1aba5cfa4303c21dfba
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oli
Size: 32KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE