653b76ce5d0811155a1d7a3e96b696492f37c913977dc8303441df2fc4704083 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

653b76ce5d0811155a1d7a3e96b696492f37c913977dc8303441df2fc4704083
Size

605KB
MD5

57a01eac4fa8358d6bf59e4217278ccd
SHA1

8747302d3ac4bd3a201072977bc76898ab695950
SHA256

653b76ce5d0811155a1d7a3e96b696492f37c913977dc8303441df2fc4704083
SHA512

5d59a986154391bf8ff9b040d9ef1b438b6b86e5caf69accba114550b0977dd738dc1f66119a0443286a2e6b45c1f710e6816b239ba9846a71e8290bd8075649
SSDEEP

12288:EgDhdkq5BCof5LfWSLTUQpB2Zu19QmrM9Q:EgDhdkMRVfLTUI2Zu1umrMS

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

653b76ce5d0811155a1d7a3e96b696492f37c913977dc8303441df2fc4704083
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 399KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE