bb8109c6a913ac41ae38adc88572512083790a52d3a6629505441a2e125f5ca6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb8109c6a913ac41ae38adc88572512083790a52d3a6629505441a2e125f5ca6
Size

1.2MB
MD5

a3824caa73ad0cc349288f4021c2ccd0
SHA1

7f716aeb79f40d4a05583153e5785213a99ff554
SHA256

bb8109c6a913ac41ae38adc88572512083790a52d3a6629505441a2e125f5ca6
SHA512

fb08239fac890231f65e87c72b819812f2a4f9df58c4ca64d4021f1516d63b671f6bd7b2260a5309250b4503eaef8c554818824973df7e20c02de4f3d60ec8ab
SSDEEP

24576:5JeJfAqkjp98zHpieQXqDsj1dE1BcJ9nPx/igr:HeJfAJGpLQqDe1W1snP8

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

bb8109c6a913ac41ae38adc88572512083790a52d3a6629505441a2e125f5ca6
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oli
Size: 1B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE