f49aa109a9e433af90d1f01b7d0e9c2225aac5255b959162117f7b3781e060be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f49aa109a9e433af90d1f01b7d0e9c2225aac5255b959162117f7b3781e060be
Size

780KB
MD5

0f8a6f4acb07a419cf70b3b31fa973b6
SHA1

4dfdd9cbf13ffe85516e236c847807a75903e45a
SHA256

f49aa109a9e433af90d1f01b7d0e9c2225aac5255b959162117f7b3781e060be
SHA512

b28c185ec0e3847125252af57c9eeff568c9abc70bc8e2e35aeb39d8665020addc381aac6f89f097335bf0dcedfa0ff6f1d55d19ab439394e362f76c8e79c5e6
SSDEEP

6144:dpqoa8aLHC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCv:dpqHC/2OGAtkCP4cejGSOpRK3CGYp

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

f49aa109a9e433af90d1f01b7d0e9c2225aac5255b959162117f7b3781e060be
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 129KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE