b0fd2577e7794cbadc13b61087adbf864ba7af4c7fdda37052fb3d3e97b44762 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0fd2577e7794cbadc13b61087adbf864ba7af4c7fdda37052fb3d3e97b44762
Size

1.2MB
MD5

804b390a3e8f08c1a8f539373443b459
SHA1

05014b88ca15d67b141d46d3cd43d13c73bb28f1
SHA256

b0fd2577e7794cbadc13b61087adbf864ba7af4c7fdda37052fb3d3e97b44762
SHA512

d68bfd60f12f063c06b6210c6feee4b8c1ad32d6fb237c1d4925b8e1c0e58c83cc87d3fd46ad5e92520b54eac3a14b98e0d8e75e47f436ffb66cafb39a5eae32
SSDEEP

24576:xJeJfAqkjp98zHpieTXCeGOxm4h95oSV0aBFS/Xv6Cq7l:/eJfAJGpLrCeGOxm4H5/6gS/XyTl

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

b0fd2577e7794cbadc13b61087adbf864ba7af4c7fdda37052fb3d3e97b44762
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE