94d499771c6425d41ba4a3cef3ba9754e24fbef24d920a15d7ba5c6657458873 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94d499771c6425d41ba4a3cef3ba9754e24fbef24d920a15d7ba5c6657458873
Size

1.2MB
MD5

53a5fcb1dbeb62615bb3fb8906316afd
SHA1

15946dee4607a1368385beb405a29939a421d7a9
SHA256

94d499771c6425d41ba4a3cef3ba9754e24fbef24d920a15d7ba5c6657458873
SHA512

169714dee1ab31f37f4ccb9669e72205de345fa32933d10a0c585d06b57d9b46e06c51bd969eb705561c8212cf2ecba704fe3d0942257454cb74fd366ba483c3
SSDEEP

12288:7pqiC/2OGAtkCP4cejGSOpRKnCzfPDZRQ:7po/2+ttPJLfpRKnCzftRQ

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

94d499771c6425d41ba4a3cef3ba9754e24fbef24d920a15d7ba5c6657458873
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE