ce63255a8edde26622d2de7a1b1c0923791ee1624a38f6a358c5e7f4b59f4348 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce63255a8edde26622d2de7a1b1c0923791ee1624a38f6a358c5e7f4b59f4348
Size

509KB
MD5

a00d4a8e1c054ca283e3e4746a1ae5d0
SHA1

b8754e69fc312af33a247082f0b23679fc168110
SHA256

ce63255a8edde26622d2de7a1b1c0923791ee1624a38f6a358c5e7f4b59f4348
SHA512

4cafe9c24be09faabeb8ecda9fc854fe760c7e78176c3f56de7426356bb3d1cf01e077998f1d98a3bea9dad224543d983144cbdea2c51359b5aabafa28a6a4a3
SSDEEP

12288:7gFhdkq5BCoe5LfWSLTCQpf26619QtkI:7gFhdkMRafLTCW2661utkI

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

ce63255a8edde26622d2de7a1b1c0923791ee1624a38f6a358c5e7f4b59f4348
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rol
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bnejspz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE