67d07271a6b529af153758fc032585156577e82595ab0d19497df91f82611186 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67d07271a6b529af153758fc032585156577e82595ab0d19497df91f82611186
Size

1.3MB
MD5

4c789f80c82c0587796250be57ab63f8
SHA1

a82cf921e362a9530ba8c5619d173b166da97c12
SHA256

67d07271a6b529af153758fc032585156577e82595ab0d19497df91f82611186
SHA512

07e950a1f2c561091789da170777ff36658ddafa6777b341b199938fb75c655ddeb5a0426223f0603854b667e572d91154db66c726d9763e7da2d4d01307fcaa
SSDEEP

6144:hpqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSPOpjNhcAYnCV:hpqiC/2OGAtkCP4cejGS2pRK3CGY

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

67d07271a6b529af153758fc032585156577e82595ab0d19497df91f82611186
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ordata
Size: 128KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE