f7e9de94fb05220e0594e00a4b6df28c541deaf3fb7b1f258c525405728459af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7e9de94fb05220e0594e00a4b6df28c541deaf3fb7b1f258c525405728459af
Size

1.2MB
MD5

8469bd867481e428e889ee68a8db7b3e
SHA1

4f200d623a8c28cd1af8952b93faf100e3bf6c5e
SHA256

f7e9de94fb05220e0594e00a4b6df28c541deaf3fb7b1f258c525405728459af
SHA512

b1c2e38d85c46621d2ad8eda896e41f51f07f486305ff5741cf5361c1bedf054483d5e840398d6c98c45638dc0832f9a7ede2272de7a66d156e47a0fd13861c0
SSDEEP

12288:WJeJfEuGstgg/kjp98zHpie5toLQvBSXyMa:WJeJfAqkjp98zHpieToL4BcJa

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

f7e9de94fb05220e0594e00a4b6df28c541deaf3fb7b1f258c525405728459af
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE