5a82edc7ddaba16d5f8fc6f5b89b4a74407e219ee41953497928a0654a7ad568 | Triage

Sharing

General

Target

5a82edc7ddaba16d5f8fc6f5b89b4a74407e219ee41953497928a0654a7ad568
Size

1.1MB
MD5

dd5a580c6f3b8a648abf18a16130ceb9
SHA1

0911830abe67a1a00f9bb27991bdfae4b3648a3e
SHA256

5a82edc7ddaba16d5f8fc6f5b89b4a74407e219ee41953497928a0654a7ad568
SHA512

0943bc2182c749b1f80682e8f33e068b428d52e9bfb4dfe76178da5a71b865f1a7ea838d1f2384b205c1bc8d3805b4c4349663c1502be64873717d68918b36c5
SSDEEP

6144:g/8JeJfEuGs8k/bUlgqjpJDHCq17WSTLp980sbpy3KR/ie5bBb2Y+Ns:NJeJfEuGstgg/kjp98zHpie5tos

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Files

5a82edc7ddaba16d5f8fc6f5b89b4a74407e219ee41953497928a0654a7ad568
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.penask
Size: 385KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

. rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE