5bf4f8d9b9287f6ad24df8069426b92b93618cc0f01e649646c8597aed302d00 | Triage

Sharing

General

Target

5bf4f8d9b9287f6ad24df8069426b92b93618cc0f01e649646c8597aed302d00
Size

952KB
MD5

85709c78ce1c001ec8cc52d8f0853220
SHA1

ca551b4dea51a22839d0339ce7879d87ddb10134
SHA256

5bf4f8d9b9287f6ad24df8069426b92b93618cc0f01e649646c8597aed302d00
SHA512

242c859620eb03a9aa06a2b8e9caa925e5bb4808f7344c01a1641a743af1a8b4f44f42ea1b9cb8d978783800ea8fcfb879621bcc8716c726472161efbd8faf00
SSDEEP

12288:FpqiC/2OGAtkCP4cejGSOpRK3CnIiCSsPK:Fpo/2+ttPJLfpRK3CnHCSo

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

5bf4f8d9b9287f6ad24df8069426b92b93618cc0f01e649646c8597aed302d00
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srdata
Size: 114KB - Virtual size: 188KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE