fc88f64dc242586ca42c6d6547bb0b04b191516fbda2e0d81e742f75a1fae74d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc88f64dc242586ca42c6d6547bb0b04b191516fbda2e0d81e742f75a1fae74d
Size

722KB
MD5

83c18239e22f7d61d2e8134d88f882b0
SHA1

8587152518c01664091207981cf25c987c015acc
SHA256

fc88f64dc242586ca42c6d6547bb0b04b191516fbda2e0d81e742f75a1fae74d
SHA512

fb8c5160468b568866b6643169fe61e1290457de5bdb99f149d99bd0139ea9c7aa33e1f7211e7ddc9931d56b69c7ed48377894ab2f3d43467117e4d3619731bf
SSDEEP

6144:Mpqoa8aLHC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcGYnCy:MpqHC/2OGAtkCP4cejGSOpRKxCGYjoR

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

fc88f64dc242586ca42c6d6547bb0b04b191516fbda2e0d81e742f75a1fae74d
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE