06e5699875188cf5141a46e4880fc96e25d7742a3feb1de02789175aac13d446 | Triage

Sharing

General

Target

06e5699875188cf5141a46e4880fc96e25d7742a3feb1de02789175aac13d446
Size

819KB
MD5

1636cbdcc33ec35b6840deac95fe0e50
SHA1

a4cbf0d253e3c420d660afb60824ab1548287266
SHA256

06e5699875188cf5141a46e4880fc96e25d7742a3feb1de02789175aac13d446
SHA512

be4566ebd981a94a4420d96899933725acb6a54f1499a44bf7bb05df5a7b4f089462bb94551cdbaa5b23edcb3206cca7fac1776d8979f570d467a8dc98139d05
SSDEEP

12288:jpqiC/2OGAtkCP4cejGSOpRK3ChYt/T2a+jGx6bB4Kwwl:jpo/2+ttPJLfpRK3ChYKGx6bB4KZ

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

06e5699875188cf5141a46e4880fc96e25d7742a3feb1de02789175aac13d446
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.�rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE