0f1d323867696086d371a6042bdfa1472b24694c238d26401ea2c99fab17ef82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f1d323867696086d371a6042bdfa1472b24694c238d26401ea2c99fab17ef82
Size

846KB
MD5

76f325670ed4d05dda9b770afb26febe
SHA1

8ca7788b77c728d6c99965eccb539c1d33b8111b
SHA256

0f1d323867696086d371a6042bdfa1472b24694c238d26401ea2c99fab17ef82
SHA512

b91facf2a0d99b57d857ed4c4e377ef2d6b6ffc492e6f1ee71542c0132e1825178f30dc8ddd3189d71cb492bb401453bdea509e6486a7b5550a4e486517cd65f
SSDEEP

6144:Bpqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCY:BpqiC/2OGAtkCP4cejGSOpRK3CGYooK

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

0f1d323867696086d371a6042bdfa1472b24694c238d26401ea2c99fab17ef82
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 195KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bfwawrs
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE