d2fd7b1ef3914cb74da8ca39a621e81afa9b4fde86a4bf48c65ca715fcb225a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2fd7b1ef3914cb74da8ca39a621e81afa9b4fde86a4bf48c65ca715fcb225a5
Size

779KB
MD5

4636c7860d6817306597609fd6406ac0
SHA1

4ff29b44da7161347fc15eecc87581c905cb2996
SHA256

d2fd7b1ef3914cb74da8ca39a621e81afa9b4fde86a4bf48c65ca715fcb225a5
SHA512

c3e349bd4f96090c980ad14bcafa7f1c6a1e411bb1d9bdd7db4d5a9fa6263401b8a3fe18e6d9ce4b6d2323c6783d010a12ec85fd6d2961061765990adaaefea6
SSDEEP

6144:ppqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCe:ppqiC/2OGAtkCP4cejGSOpRK3CnIi+

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

d2fd7b1ef3914cb74da8ca39a621e81afa9b4fde86a4bf48c65ca715fcb225a5
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srdata
Size: 128KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE