e49132ac287389f5e3b92d29349b76aabbe29f7cfa53fbfe22d5952d4657ff4d | Triage

Sharing

General

Target

e49132ac287389f5e3b92d29349b76aabbe29f7cfa53fbfe22d5952d4657ff4d
Size

1.2MB
MD5

a07d308fc1170811313f2b48a756c8ef
SHA1

9515a5259b21517487118b1e6db7062088cfaaed
SHA256

e49132ac287389f5e3b92d29349b76aabbe29f7cfa53fbfe22d5952d4657ff4d
SHA512

9e8f83548e890edd939273c3950c03b67a43d679d43956df31e00860158168e9a178dc354834e5260c6096c77e173f68547d73e0d3f6661f08db7f41e10c3d8d
SSDEEP

24576:fJeJfAqkjp98zHpieTXCeGOxmI8/+po9TFEu5OJe:BeJfAJGpLrCeGOxmsQTFEu5OJ

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

e49132ac287389f5e3b92d29349b76aabbe29f7cfa53fbfe22d5952d4657ff4d
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.spm
Size: 1B - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE