fb1fc22edf47c40735eda7deb03b325d249f3aed0bc6fb7e25e3fcedbc571e1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb1fc22edf47c40735eda7deb03b325d249f3aed0bc6fb7e25e3fcedbc571e1a
Size

1.2MB
MD5

11fc09958a8b24caf715d73d1e9cf5de
SHA1

6bb9e78a9c79900939cc2553b95b69e906dc1de5
SHA256

fb1fc22edf47c40735eda7deb03b325d249f3aed0bc6fb7e25e3fcedbc571e1a
SHA512

ecf019e2bb5afaaebf1f7f0807e808ed8173da4c61d57bd41a622716285715f425fbc283fa9af846d40d7426f05dbdde1920e3a8b2fd48327da34e32b0453c03
SSDEEP

24576:gJeJfAqkjp98zHpieTXBeveGOxmKoc7LbvyFyK9Ig:yeJfAJGpLrBeveGOxmzc7Mz

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

fb1fc22edf47c40735eda7deb03b325d249f3aed0bc6fb7e25e3fcedbc571e1a
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE