b65669dc5c46746db415cec88498a4223f832998d826c3ddd220676edddf93d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b65669dc5c46746db415cec88498a4223f832998d826c3ddd220676edddf93d5
Size

3.3MB
MD5

6e339369b5f5e1d2597d18d2c0dc6fa1
SHA1

3e8ed04e35f59a2a29b10e34f8713fad37554a21
SHA256

b65669dc5c46746db415cec88498a4223f832998d826c3ddd220676edddf93d5
SHA512

b3a5b8623b774cc4912b7674a6d9ad50317057891bcf4e928a868b28de835c5d1ec16a2002ed89d2fc99667a756e6f486af2dda699a1bf144c1b1a8030120359
SSDEEP

12288:zJeJfEuGstgg/kjp98zHpig5toL13YDXuvBSXyM:zJeJfAqkjp98zHpigToL13YqBcJ

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

b65669dc5c46746db415cec88498a4223f832998d826c3ddd220676edddf93d5
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

. rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE