006d9a250657a2eb6afbe99d2d2c5f214d5544fc9a20bfed07768dbf205f4761 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

006d9a250657a2eb6afbe99d2d2c5f214d5544fc9a20bfed07768dbf205f4761
Size

862KB
MD5

9231446720a305ea78cfc5ef05adaeb0
SHA1

78d47a1b84040c5dd8c1a4d6435977f42da31ea6
SHA256

006d9a250657a2eb6afbe99d2d2c5f214d5544fc9a20bfed07768dbf205f4761
SHA512

345127d85ca39ccdd9702b0b32ece2833518e39a8436cb783b2fef39a726675b5c9b75a7df6f8246429e3929e222736c61059001de217529dde8756ab13ccede
SSDEEP

6144:lpqoa8aL1C/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcbYnCV:lpq1C/2OGAtkCP4cejGSOpRK8CGY

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

006d9a250657a2eb6afbe99d2d2c5f214d5544fc9a20bfed07768dbf205f4761
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 160KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ugztgrx
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE