5b6605090fbdfba1b331eae7c0c683e6e9e4d6476e32aa22ab23d21a38513e1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b6605090fbdfba1b331eae7c0c683e6e9e4d6476e32aa22ab23d21a38513e1a
Size

838KB
MD5

74bb155f9c57f0425097a00c868f83ca
SHA1

3a661789c479d7e921f604cf37821e4747f92c45
SHA256

5b6605090fbdfba1b331eae7c0c683e6e9e4d6476e32aa22ab23d21a38513e1a
SHA512

9981a48439b7fa628b4ebae64c101fd4d376a8a2928f2c11113a72887e9658f25267c47489ee819288334d7ec1b8b98e5a66f40f1eec9bd9a54978cf77879b76
SSDEEP

6144:Epqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCk:EpqiC/2OGAtkCP4cejGSOpRK3C1S

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

5b6605090fbdfba1b331eae7c0c683e6e9e4d6476e32aa22ab23d21a38513e1a
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 128KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE