24f5358811bdaf9a372f422a3465a78ba8b650cba7f11e9eb02b9d211375e52f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24f5358811bdaf9a372f422a3465a78ba8b650cba7f11e9eb02b9d211375e52f
Size

800KB
MD5

83d14df2922973ed783f77187bed7839
SHA1

f16632e2bdfaf8d5672c65e4ba9a9249daad6c5a
SHA256

24f5358811bdaf9a372f422a3465a78ba8b650cba7f11e9eb02b9d211375e52f
SHA512

2bd02d144276fe277ef11d7855adbe4ac212403046525352420c0bf3bd92bf4c0e0f417d6b586390a38a6502dab5b64612c222220d9da872b4a0f29eaa45dd10
SSDEEP

6144:8pqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCR:8pqiC/2OGAtkCP4cejGSOpRK3CnYc

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

24f5358811bdaf9a372f422a3465a78ba8b650cba7f11e9eb02b9d211375e52f
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 148KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE