1c664db3168773a6c491bdd76fb7d8ebe1c0b0b522f8b0f625509546f5f4bb83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c664db3168773a6c491bdd76fb7d8ebe1c0b0b522f8b0f625509546f5f4bb83
Size

632KB
MD5

840428caca2e6bd1a768a52ebc897e06
SHA1

a00ba679acfa9ff261f3568e8355d7e0ca5361ac
SHA256

1c664db3168773a6c491bdd76fb7d8ebe1c0b0b522f8b0f625509546f5f4bb83
SHA512

b57178f2df83969292e8bdff6729d440be7a0d23da2b14f83fb210d3cf4313043cb42a2b6bc929add593b71a50c7fa3bd76067c46e0b6d7b691285c882d44099
SSDEEP

12288:x6SKqT31T6WpJY6V765jKqosthm3Nb46/u7EjTIcwCV9351j:gxqT31T6WE6I5jKqosHm9bbZjTIcwCDn

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

1c664db3168773a6c491bdd76fb7d8ebe1c0b0b522f8b0f625509546f5f4bb83
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE